\n
<\/p>\n
\n\t\t\t\t\t\t\t\t\tSyscoin paused its bridge immediately and urged exchanges to freeze deposits connected to the tainted transaction trail.\t\t\t\t\t\t\t\t<\/p>\n<\/p><\/div>\n
An attacker exploited a validation flaw in Syscoin\u2019s bridge system, minting about 5 billion SYS tokens without authorization and sending the token\u2019s price into a nearly 20% freefall.<\/p>\n
This incident was revealed by the Syscoin team in an early postmortem published on X, and it comes during a tough stretch for SYS, which was already deeply in the red across the last few weeks and months.<\/p>\n
According to Syscoin\u2019s postmortem, the attacker exploited<\/a> a validation issue in the bridge relay path, which incorrectly accepted or interpreted a transaction proof.\u00a0That error caused the system to treat a fraudulent transaction as valid and create an unauthorized output of approximately 5 billion SYS, then valued at just under $10 million.<\/p>\n Per the Syscoin team, the stolen funds were sent to the address sys1qgaelv\u20269wvcw and then split across two other wallets,\u00a0one holding about 4 billion SYS and the other the remaining 1 billion.<\/p>\n Syscoin immediately paused the bridge and has since contacted exchanges and ecosystem partners asking them to blacklist or freeze any deposits connected to the tainted UTXO trail and its downstream transactions.\u00a0The team also said that it had identified the affected validation path and had put in place a fix pending security review and implementation.<\/p>\n According to blockchain analytics account Hupzy, operated by Spot On Chain, the incident was a recurring structural problem. It also noted<\/a> that while blacklisting by exchanges may contain the secondary damage, the reputational hit to the bridge model will persist.<\/p>\n The exploit couldn\u2019t have landed at a worse time for SYS holders, considering that when it happened, the token was already down more than 43% in seven days and over 82% in the last month.<\/p>\n A lot of that longer-term decline was already in motion after Binance delisted<\/a> SYS last month alongside four other tokens following a review of its listing standards.<\/p>\n Shortly after the delisting news broke, the Syscoin community responded by pulling well over 300 million SYS from the exchange, with over 600 new nodes reportedly added to the network.<\/p>\n The attack on the Syscoin bridge is the latest in a string of cross-chain security incidents that have kept DeFi on edge. They include an $11 million exploit on the Verus network in May and the draining<\/a> of $7.3 million from more than 1,400 DxSale liquidity pools on the BNB Chain.<\/p>\n Luckily for Verus, the hacker later returned<\/a> about $8.5 million, keeping $2.8 million for themselves as a white-hat bounty.<\/p>\n LIMITED OFFER for CryptoPotato readers at Bybit: Use this link<\/a> to register and open a $500 FREE position on any coin!<\/b><\/p>\n<\/div>\n<\/div>\nA Token Already Under Pressure<\/h2>\n
You may also like:<\/h3>\n
\nBinance Free $600 (CryptoPotato Exclusive): Use this link<\/a> to register a new account and receive $600 exclusive welcome offer on Binance<\/b> (full details<\/a>).<\/p>\n