# Symbiosis Bitcoin bridge security exploit

> Live situation record from CLSTR: https://clstr.news/situations/symbiosis-bitcoin-bridge-security-exploit
> Updated: 2026-09-14T05:42:21.000Z. Sources: 15. Developments: 2.

On September 11, 2026, the cross-chain liquidity protocol Symbiosis experienced a security exploit targeting its Bitcoin BridgeV2 smart contract. The breach allowed an attacker to mint approximately 46.1 billion unbacked synthetic Bitcoin (syBTC) tokens across the BNB Chain and Ethereum, a volume reported to be over 2,000 times the total circulating supply of Bitcoin.

Due to liquidity constraints, the attacker was only able to convert a small portion of the counterfeit tokens into roughly 4.39 wrapped Bitcoin (WBTC), realizing approximately $336,000 in value. 

In response, Symbiosis suspended its native Bitcoin Bridge routes to mitigate further risk, though other routing protocols involving EVM networks, TRON, and TON remain operational. The team has recovered approximately 15 BTC, which is being held in a multisig wallet, and has offered a 20% white-hat bounty to assist in fund recovery. The protocol is also developing a compensation framework for affected liquidity providers.

## Timeline

### 2026-09-14: Symbiosis Bitcoin Bridge exploit mints 46 billion fake tokens

An exploit in the Symbiosis Bitcoin Bridge allowed an attacker to mint 46.1 billion fake syBTC tokens, though they only successfully extracted approximately $336,000 in actual profits.

8 sources. https://clstr.news/cluster/symbiosis-bitcoin-bridge-exploit-mints-46-billion-fake-tokens

### 2026-09-12: Symbiosis halts Bitcoin bridge after syBTC minting exploit

Symbiosis halted its Bitcoin bridge after an attacker exploited the BridgeV2 contract to mint billions in unbacked syBTC, ultimately extracting approximately $336,000 in real value.

8 sources. https://clstr.news/cluster/symbiosis-halts-bitcoin-bridge-after-sybtc-minting-exploit

---
Cite as: Symbiosis Bitcoin bridge security exploit. CLSTR, https://clstr.news/situations/symbiosis-bitcoin-bridge-security-exploit