Symbiosis recovers 15 BTC after bridge exploit, compensation terms pending

September 14, 2026 at 02:20 AM2 min

This digest was compiled by AI from multiple sources — links to the originals are below.

Cross-chain protocol Symbiosis recovered approximately 15 BTC after an attacker exploited its native Bitcoin Bridge on Sep. 11. The native bridge remains paused while partner Bitcoin swaps via Chainflip and THORChain are back online. The protocol has not announced compensation terms for affected liquidity providers as a 20% bounty window closes Sep. 13.

Key Facts

Symbiosis recovered approximately 15 BTC after the Sep. 11 exploit of its native Bitcoin Bridge.
Blockaid reported that the attacker minted about 2^62 raw units of syBTC on BNB Chain and realized roughly $336,000 in WBTC proceeds on Ethereum.
The native Symbiosis Bitcoin Bridge remains paused, while partner-routed Bitcoin swaps via Chainflip and THORChain are back online.
Symbiosis offered the attacker a 20% white-hat bounty through Sep. 13, with the same percentage available afterward for recovery information.
The protocol has not disclosed who qualifies for compensation, how it will be calculated, or when payments could begin.

Exploit Mechanics

The vulnerability was exploited at about 04:28 UTC on Sep. 11, according to Symbiosis's incident statement. Blockaid reported that a transaction accepted as signed by Symbiosis's BridgeV2 system minted approximately 2^62 raw units of syBTC to a newly created wallet on BNB Chain. The same beneficiary sold about 4.39 WBTC on Ethereum, realizing roughly $336,000 in WBTC proceeds at the time of Blockaid's alert. Symbiosis said only the Bitcoin Bridge was affected and that routes spanning EVM chains, TRON, and TON remained operational.

Recovery and Compensation

Symbiosis said the recovered bitcoin is secured in a team-controlled multisig. The 15 BTC figure is the amount Symbiosis says it recovered to date, with final accounting still in progress. The protocol said it was contacting every affected liquidity provider directly and building a compensation framework, with criteria to follow. Symbiosis has not disclosed who will qualify, how compensation will be calculated, or when payments could begin.

Bridge Status

Symbiosis initially said Bitcoin-related swaps were unavailable while it deployed updates. In a later operational update, the protocol said Bitcoin swaps routed through partners Chainflip and THORChain were back online, while the native Symbiosis Bitcoin Bridge remained paused. The split keeps traffic off Symbiosis's paused bridge while users access alternative Bitcoin routes. Symbiosis offered the attacker a 20% white-hat bounty through Sep. 13, after which the same percentage would be offered to anyone providing information that leads to recovery.