Hacker Mints 46 Billion Fake Bitcoins From 25 Cents on Symbiosis
A bridge vulnerability allowed an attacker to mint more than 2,000 times Bitcoin's total supply out of thin air.
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
Key takeaways
- An attacker used two software bugs on the Symbiosis bridge to mint 46 billion synthetic Bitcoins.
- The initial trigger required just $0.25 worth of BTC.
- Symbiosis estimates preliminary real-asset losses at 9.97 BTC.
An attacker just turned 25 cents worth of Bitcoin into 46 billion fake BTC tokens on the Symbiosis cross-chain bridge.
It took two separate software bugs in the bridge's codebase to pull it off, letting the exploiter manufacture unbacked synthetic Bitcoin (syBTC) at scale. To put that in perspective: the minted total comes out to more than 2,000 times Bitcoin's hard-capped 21 million supply. But while the attacker generated billions in phantom tokens on paper, Symbiosis puts preliminary actual losses at 9.97 BTC.
Flaws in bridge logic
Cross-chain protocols aren't complex in principle: smart contracts lock real tokens on one chain before issuing synthetic wrappers on another. When that execution logic breaks, though, the math collapses instantly.
Here, the attacker caught two distinct bugs in how Symbiosis processed deposit confirmations. By chaining both vulnerabilities together, a microscopic transaction worth a single quarter was amplified into tens of billions of fake tokens inside the protocol's internal accounting system.
Why it matters
If you use cross-chain bridges, treat this as a clear reminder of bare smart contract risk. Synthetic wrappers are only as solid as the code backing them up. When a bridge contract fails, fake assets get printed effortlessly, leaving real pooled liquidity exposed to getting drained. Audits or not, logic errors can still turn literal pocket change into billions of fake dollars in a single block.
Source: CoinDesk
Top Crypto Casinos Right Now
🇺🇸 Showing sites that accept players from United States Change country
Advertising disclosure: we may earn a commission when you join an operator via links on this page, at no cost to you. This never dictates our ratings. How we make money
More info Less info
Why we chose it: A US-facing book that pays a premium for crypto deposits: 125% against 100% for cash, with fee-free deposits across five coins.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: BetNow's casino floor with the biggest match bonus we list. The 200% headline deserves a careful read of the code terms behind it.
- Payout time
- Within 24 hours (crypto)
- KYC
- Required
Restricted countries: Australia, Afghanistan, Bulgaria, Central African Republic, Congo - Brazzaville, Eritrea, France, Guinea-Bissau and 16 more.
More info Less info
Why we chose it: A US-oriented casino that turns away only New Jersey. The cashier takes crypto, but the site publishes fewer specifics than any operator we list.
- KYC
- Required
Restricted countries: New Jersey (US).
Mia Chen
Mia digs into DeFi and on-chain data, translating protocol mechanics into plain English for everyday readers.
