Symbiosis Hack Leaves Liquidity Providers Unpaid Amid $336K in Attacker Proceeds

Cross-chain protocol Symbiosis was hacked on September 11th, resulting in approximately 2^62 raw units of syBTC being minted to a new wallet on BNB Chain. The attacker then sold about 4.39 WBTC on Ethereum, realizing roughly $336,000 in proceeds at the time of Blockaid's alert.

Symbiosis initially reported that it recovered around 15 BTC from the hacker's funds, which are now secured in a team-controlled multisig. However, liquidity providers who were affected by the hack remain unpaid as Symbiosis continues to finalize accounting and compensation terms.

The native bridge remains paused due to the vulnerability, but Bitcoin swaps routed through partners Chainflip and THORChain are available again. Symbiosis is offering a 20% bounty to anyone providing information leading to recovery of the stolen funds, with the deadline set for September 13th.