Symbiosis Suffers Bitcoin Bridge Exploit, 15 BTC Recovered

Kucoin

Symbiosis Suffers Bitcoin Bridge Exploit, 15 BTC Recovered

First seen 12 Sep 2026, 17:26 UTC • •51.9

Article Content

1 / 3

Browse articles

ThreatCluster •September 12, 2026 at 19:27 UTC

•Symbiosis's Bitcoin Bridge was exploited, halting BTC routes.
•Approximately 15 BTC has been recovered and secured in a multisig wallet.
•A 20% bounty is offered to the attacker until September 13, 2026.

On September 11, 2026, Symbiosis experienced a security incident when an attacker exploited a vulnerability in its Bitcoin Bridge, halting BTC cross-chain routing. Other routes, including EVM chains, TRON, and TON, remained unaffected. The Symbiosis team has successfully recovered approximately 15 BTC, which has been secured in a multisig wallet. They have offered a 20% bounty to the attacker for the return of the stolen funds, valid until September 13, 2026. After this deadline, the same bounty will be available to anyone providing information that leads to the recovery of the funds. The final loss amount is still being calculated, with further updates promised. The incident has prompted the team to contact affected liquidity providers directly and establish a compensation framework.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-09-11

Security incident reported

An attacker exploited a vulnerability in the Bitcoin Bridge, halting BTC cross-chain routing while other routes remained operational.

X

2026-09-11

15 BTC recovered

Symbiosis secured approximately 15 BTC in a team-controlled multisig wallet after the exploit.

X

2026-09-12

Bounty offer announced

Symbiosis announced a 20% bounty for the return of stolen funds, valid until September 13, 2026.

More articles in this cluster (2)

Threat Graph

6 entities, 5 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Organization (1)

Symbiosis

Technique (1)

T1190 - Exploit Public-Facing Application

Affected Platform (4)

Bitcoin Bridge
Octopools
TON
TRON

Relationships

T1190 - Exploit Public-Facing Application targets Bitcoin Bridge
T1190 - Exploit Public-Facing Application targets Octopools
T1190 - Exploit Public-Facing Application targets TON
T1190 - Exploit Public-Facing Application targets TRON
T1190 - Exploit Public-Facing Application related to Symbiosis

Following this threat?

Track Symbiosis in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical Cisco FMC Vulnerabilities Under Active Exploitation Cisco's Secure Firewall Management Center (FMC) Software has two critical vulnerabilities, CVE-2026-20079 and CVE-2026-20316, that are currently being exploited by state-sponsored and ransomware actors. CVE-2026-20079, rated 10.0 on the CVSS scale, allows unauthenticated remote attackers to bypass authentication and…

Critical GitLab Vulnerabilities Exploited Within Hours of Disclosure On September 10, 2026, GitLab released patches for critical vulnerabilities CVE-2026-85706 and CVE-2026-87719. CVE-2026-85706, a path traversal flaw, allows unauthenticated users to read arbitrary files from GitLab servers, while CVE-2026-87719 enables credential theft via insecure deserialization. Both…