Skip to main content
AVOID.NET
Sign in

Symbiosis Finance

avoid.net/symbiosis-finance→38/100·78% conf.
[AI-DRAFTED · AWAITING VERIFICATION]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·46VRG8…yu2s

Summary

Symbiosis Finance is a cross-chain DEX and bridge protocol launched in March 2022, enabling token swaps across 50+ EVM and non-EVM networks via synthetic assets and a permissioned relayer network. On September 11, 2026, an attacker exploited a message-validation flaw in its BridgeV2 contract, minting approximately 46.1 billion unbacked syBTC tokens on BNB Chain and extracting around $336,000 in real funds; total protocol losses were estimated at 9.97 BTC (~$770,000). The Bitcoin Bridge remains offline as of mid-September 2026, and a structural relayer-collusion risk — whereby two-thirds of MPC nodes acting together could drain user funds — persists independently of the exploit patch.

Connected Entities

3 entities · 14 linked investigations
Organizations
□DAO Maker24□Liquid Network22
Protocols
⌂Symbiosis Finance
Relationships
  • Symbiosis Finance→mentioned with→DAO Maker(80%)
  • Symbiosis Finance→mentioned with→Liquid Network(80%)
Also appears in
Blockstream·42DAO Maker·24Themis Protocol·32Liquid Network / Elements Cache-Bug Exploit (September 2026)·18Boltz Bitcoin Bridge·34Symbiosis Finance BridgeV2 syBTC Exploit (September 2026)·30Notional Finance (V1 Legacy Escrow)·8SideSwap·38Step App (FITFI)·14BTCPay Server — LND Macaroon Credential Exploit (August 2026)·52+ 4 more

Connected Through

3 shared actors · 14 investigations

Distinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.

Have evidence about Symbiosis Finance?

Timeline(8 events)

1 January 2021

Symbiosis Finance co-founded by Will Kamalov and Nick Avramov; Alexey Lushnikov joins as CTO.

Tracxn / Crunchbase

1 March 2022

Symbiosis Finance launches on mainnet, connecting multiple EVM and non-EVM networks via synthetic assets and a permissioned relayer network.

LI.FI Deep Dive

18 August 2022

Public bug-bounty program goes live on Immunefi.

Coindar

11 September 2026

BridgeV2 contract exploited at approximately 04:28 UTC. Attacker uses a ~330-satoshi ($0.25) Bitcoin deposit to exploit a decoder bug and fee-logic flaw, minting approximately 46.1 billion unbacked syBTC tokens on BNB Chain. Twelve fraudulent deposit messages cross BNB Chain, Ethereum, and Rootstock within four minutes. Actual proceeds: ~$336,000 via Uniswap v4 on Ethereum. Symbiosis estimates total LP and user losses at 9.97 BTC (~$770,000). Bitcoin Bridge immediately suspended.

Crypto Briefing / Shattered.io / NewsCord

11 September 2026

Blockaid detects and publicizes the suspicious activity, preceding Symbiosis's formal announcement.

Parameter.io

11 September 2026

Symbiosis team secures approximately 15 BTC in a multisig wallet and announces rerouting of Bitcoin swaps through Chainflip and THORChain.

KuCoin

13 September 2026

Symbiosis extends a public 20% white-hat bounty offer to the attacker, with a deadline of September 13, 2026. No public response from the attacker is reported.

Crypto Briefing

14 September 2026

Native Bitcoin Bridge remains offline. No formal compensation plan for affected liquidity providers published. Team commits to building a compensation framework and commissions independent security audits. Post-mortem subsequently published per KuCoin reporting.

KuCoin / Shattered.io
Provenance & Audit Trail
Anchored on SolanaVerify on-chain16 Wayback Archives

Decision Log

This investigation is cryptographically anchored to the Solana blockchain (1 event). 16 of 19 cited source URLs have an Internet Archive snapshot.

full audit log →version history →

model: claude-sonnet-4-6

generated: 9/17/2026, 12:04:12 PM

last updated: 9/17/2026, 6:10:51 PM

avoid.net — verified advice for a post-truth world