Bitcoin Theft - GoKawiil

Symbiosis DeFi bridge loses $770,000 after admin-privilege bug lets hacker mint 46 billion fake BTC

On September 11, an attacker exploited two flaws in Symbiosis Finance's smart contracts: a hidden privilege-escalation bug granting fake admin rights, and a missing check that allowed negative transaction fees. Using just 330 satoshi, roughly 25 cents, the attacker set fees to negative values across 12 transactions, minting 46 billion wrapped syBTC tokens on a network meant to represent real Bitcoin. They then sold the fabricated tokens against legitimate wrapped-BTC pairs like WBTC and cbBTC, draining liquidity pools and converting about $336,000 into cash via Uniswap before being blocked.

tomshardware.com · 2026-09-18

Blockstream's Liquid Network hit by $340M bitcoin exploit, most funds returned

A hacker exploited a bug in Blockstream's Liquid Network settlement system to withdraw roughly 4,000 bitcoins worth about $340 million. The attacker, described as a 'white hat,' returned around 3,400 bitcoins after Blockstream patched the flaw, but retained about 600 bitcoins worth roughly $47 million. Liquid Network has suspended operations while it implements further security fixes before resuming.

techcrunch.com · 2026-09-08