Cross-chain liquidity protocol Symbiosis said it suffered a security incident after an attacker exploited a vulnerability in its bitcoin bridge at around 04:28 UTC on Sept. 11, 2026. The protocol said its BTC route has been paused, while all other routes remain operational.
According to the team, the incident was limited to the bitcoin bridge and has been isolated from the rest of the system. It said routes across EVM chains, TRON and TON were not affected, and that components including Octopools continue to operate normally. Symbiosis also said its relayer set remains online and is maintaining network security.
The team said it has recovered about 15 BTC and moved the funds to a multisig wallet under team control. It has offered the attacker a white-hat bounty equal to 20% of the funds until Sept. 13, 2026. After that deadline, the same percentage will be offered to anyone who can provide information that helps recover the assets. Symbiosis said the final loss is still being calculated and that it is contacting affected liquidity providers one by one while preparing a compensation framework.
Cross-chain liquidity protocol Symbiosis said it suffered a security incident after an attacker exploited a vulnerability in its bitcoin bridge at around 04:28 UTC on Sept. 11, 2026.
The protocol said it has paused its BTC route, while other routes continue to operate normally.
Scope of the incident
According to the team, only the bitcoin bridge was affected, and that part has been isolated from the rest of the system. Routes across EVM chains, TRON and TON were not impacted. Components including Octopools were also unaffected.
Symbiosis added that its relayer set remains in operation and is continuing to maintain network security.
Recovered funds and bounty offer
The team said it has recovered about 15 BTC and placed the funds in a multisig wallet controlled by the team.
Symbiosis said it has offered the attacker a white-hat bounty equal to 20% of the funds, valid until Sept. 13, 2026. After that, the same percentage will be offered to information providers who can help recover the assets.
Loss assessment and compensation
The protocol said the final loss is still being calculated and confirmed figures will be released later. The team is also contacting affected liquidity providers one by one and working on a compensation framework.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
