Syscoin bridge exploited via parsing inconsistency between Syscoin Core and NEVM relay. A malformed UTXO burn proof with duplicate asset commitments was accepted as valid by the relay, enabling unauthorized minting of ~5B SYS tokens.

Syscoin Bridge was exploited. The attacker leveraged a validation issue in the bridge flow, resulting in an unauthorized creation of approximately 5 billion SYS on the UTXO side. The funds were subsequently moved and split. The team has paused the bridge, is actively tracing the tainted outputs, coordinating with exchanges for blacklisting/monitoring, and working on a fix and remediation.