Back Yellow

Syscoin Halts Bridge After Exploit Spawns 5B Unauthorized SYS

Yellow • June 8, 2026

Syscoin (SYS) paused its cross-chain bridge after an attacker exploited a validation flaw and minted roughly 5 billion unauthorized tokens.

The breach struck the bridge relay path, the part of the system that verifies transactions moving between Syscoin's UTXO chain and its EVM-compatible side. The team reported that the relay path wrongly accepted a fraudulent transaction proof during a routine cross-chain check. The software then treated the bogus transfer as valid and processed it like any normal message.

That single failure minted an output of close to 5 billion SYS through the UTXO bridge route. The tokens first reached one address before the attacker began moving them, splitting the supply across separate wallets in quick succession.

The tainted balance did not stay in one place. The holdings later split into two wallets, one near 4 billion SYS and another around 1 billion SYS, the project said in a preliminary review. Developers urged holders to steer clear of the bridge while it remains offline.

Also Read: AAVE Buyers Absorb Heavy Selling, But Price Still Slides 12%

Syscoin labeled its findings preliminary and said it had pinned down the faulty validation path and prepared a fix that now awaits final review. The team is also working with exchanges to freeze, blacklist, or neutralize the affected coins before they reach open markets.

The attacker, the team wrote , created "an unauthorized SYS output ... on the UTXO side." That short line shows how a narrow logic gap in cross-chain code can spill billions of phantom tokens onto a live network. Such gaps are easy to miss and hard to undo once funds start moving.

The market reaction was swift, with SYS down more than 7% over 24 hours and trading near $0.0016. The slide ran against a broader market recovery that lifted total crypto value by more than 2% on the day, leaving SYS a clear outlier.

The breach landed during a rough stretch for cross-chain infrastructure. Security firm PeckShield logged 40 major incidents in May 2026, eight of them tied to bridge and cross-chain exploits. Such systems have absorbed billions in cumulative losses since 2022, and they keep luring attackers to the same weak points.

Read : XRP And Stellar Are Trending Together Again, Here's What Traders Spotted

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Syscoin Bridge Exploit Results in 5 Billion Unauthorized Tokens Minted On June 8, 2026, Syscoin reported a security incident involving its cross-chain bridge, where an attacker exploited a validation flaw, minting approximately 5 billion unauthorized SYS tokens. The flaw occurred in the bridge relay path, which incorrectly accepted a fraudulent transaction proof, leading to the unauthorized output valued at nearly $10 million. The attacker moved the minted tokens to multiple wallets, with significant amounts split between two addresses. Syscoin has paused the bridge service and is working with exchanges to blacklist the affected tokens. The incident has caused a nearly 20% drop in SYS's market price, compounding existing losses for holders. This exploit highlights ongoing vulnerabilities in cross-chain systems, with similar incidents reported in the DeFi space. The Syscoin team has identified the issue and is preparing a fix pending security review. 19 sources 71

Extracted Entities

Syscoin Halts Bridge After Exploit Spawns 5B Unauthorized SYS

The full story

Extracted Entities

Attack Types (1)

Companies (1)

CWE Weaknesses (1)