Symbiosis Recovers 15 BTC After Bridge Exploit

The exploit originated from a vulnerability in the protocol's BridgeV2 contract on the BNB Chain. Security firm Blockaid reported that the attacker minted roughly 46.1 billion syBTC—an amount exceeding Bitcoin’s total supply by a factor of 2,000. Despite the massive figure, the attacker successfully converted only 4.39 WBTC into approximately $336,000 on Uniswap v4 before the protocol isolated the affected infrastructure.

Symbiosis has since moved the recovered assets into a multisig wallet. While the native Bitcoin Bridge remains offline, the protocol has integrated Chainflip and THORChain to maintain swap functionality for users. The team is currently finalizing its accounting to determine the total loss and is contacting liquidity providers individually to outline a compensation framework.

To encourage the return of remaining funds, Symbiosis offered a 20% white-hat bounty, which expired on September 13. The protocol has extended this reward to any party providing actionable information that leads to further asset recovery. No timeline has been provided for the restoration of the native bridge, as developers continue to coordinate with security researchers to assess the full scope of the breach.