Syscoin’s postmortem says a June 7 cross-layer parsing mismatch let a malicious UTXO burn with duplicate asset commitments resolve as native SYS on the NEVM relay, releasing 5B SYS. The attacker returned the funds to Syscoin’s recovery address, and the team burned them via OP_RETURN; the bridge stays paused while relay/Core fixes enforce canonical, unambiguous burn proofs. Native SYS deposits can resume at exchanges where appropriate, but the bridge remains closed until final review is done.

TLDR by @Benthic

More on Exploit

Comments