A Symbiosis attacker spent just 330 satoshis—about $0.25—to exploit its Bitcoin bridge and mint roughly 46 billion syBTC, more than 2,000 times Bitcoin’s maximum supply. The incident occurred on September 11, but details were disclosed only now.

  • Forged both approved depositor and bridge-admin privileges
  • Set a negative minimum fee, turning deductions into extra withdrawals
  • Drained 9.97 BTC worth about $770,000 in four minutes

The attacker used 12 fake deposits across BNB Chain, Ethereum and Rootstock. Low liquidity limited the damage, while Symbiosis rescued 15.2 BTC to reserve addresses. The exploit is a brutal reminder: bridge TVL is not safety. Traders should avoid syBTC-linked pools until contracts are independently audited and liquidity is restored.