Symbiosis Recovers 15 Bitcoin from Bridge Hack and Offers 20% Bounty
Symbiosis Retrieves Bitcoin After Bridge Attack
Cross-chain liquidity protocol Symbiosis has recovered 15 Bitcoin, worth about $1.1 million, from a recent exploit on its Bitcoin bridge. The protocol announced this on Friday, stating that the funds are now in a team-controlled multi-sig wallet, which is a wallet requiring multiple approvals for transactions.
Key Details from the Incident
- The attacker minted 46.1 billion unbacked tokens but only netted 4.3 Wrapped Bitcoin (WBTC), valued at $336,000.
- Symbiosis is offering a 20% bounty for information leading to further asset recovery.
- The Bitcoin bridge remains paused, but all other routes are operational.
- The protocol plans to reveal a compensation framework for affected liquidity providers.
Symbiosis' Official Statement
In an official X post, Symbiosis confirmed the recovery of 15 BTC into a team-controlled multi-sig wallet and clarified that all routes remain operational, except the exploited Bitcoin bridge which is paused.
Security Firm Blockaid Reports on Exploit
Blockchain security company Blockaid flagged the exploit on Friday, reporting that the attacker's address minted 46.1 billion unbacked tokens but realized net proceeds of 4.3 Wrapped Bitcoin (WBTC), worth $336,000.
Confirmed Facts and Unconfirmed Details
Confirmed facts include the recovery of 15 BTC, the exploit on the Bitcoin bridge, and the bounty offers from Symbiosis. However, it is unclear how the recovered 15 BTC relates to the $336,000 in proceeds attributed to the attacker, as the protocol has not specified this connection. Additionally, while DefiLlama clocked around $336,000 lost in the exploit, the protocol has yet to disclose its final accounting of losses.
Why Bridge Exploits Matter for DeFi
The incident highlights ongoing security challenges in decentralized finance (DeFi), where bridge exploits continue to test protocols. Previous examples include Secret Network's "infinite mint" exploit in June and the Verus-Ethereum bridge drain in May, showing that cross-chain bridges remain vulnerable targets.
Next Steps: Compensation and Further Recovery
Symbiosis has announced that it will reveal a compensation framework for affected liquidity providers and is now offering a 20% bounty to anyone who provides information that leads to asset recovery, after the initial white-hat bounty deadline for the attacker expired on Sunday.