
The project said a validation flaw let an attacker create unauthorized SYS outputs on the UTXO side, prompting a pause and coordination with exchanges and partners to blacklist, freeze, or monitor related deposits.
Syscoin has suspended its bridge services after a cross-chain bridge security incident involving about 5 billion SYS. The project said an attacker exploited a validation issue in the bridge process to create unauthorized SYS outputs on the UTXO side. The bridge remains paused while the team implements and reviews a fix, and it is working with exchanges and partners to blacklist, freeze, or closely monitor related SYS deposits. Cross-chain bridges, which move assets between networks, are a frequent point of failure in crypto because they depend on accurate message validation and asset accounting across separate systems.