Quick answer (October 2026): On June 11, 2026, a malformed SPV proof got past the Syscoin bridge relay parser, and the bridge minted SYS against deposits that never happened, about 5 billion SYS by early estimates. Whitehats coordinated a recovery and the minted SYS was returned. The incident shows that a bridge that mints wrapped value is only as safe as the code that checks its proofs.
On June 11, 2026, the Syscoin bridge minted 5 billion SYS after a malformed SPV proof slipped past the bridge relay parser. The proof failed validation that a stricter parser would have rejected, and the bridge issued tokens against deposits that were never made. Whitehats coordinated a recovery and the funds were returned, but the mechanism is the point: a bridge that mints wrapped value on one chain against a proof from another is only as safe as the parser checking that proof.
TL;DR: A malformed SPV proof tricked Syscoin's bridge relay into minting 5 billion SYS on June 11, 2026. The funds were whitehat-recovered. Treat the 5B SYS figure as an early estimate until a formal postmortem confirms it. A swap with no bridge has no proof to forge, coins route wallet to wallet, nothing is minted or pooled in between.
A cross-chain bridge is a contract pair that locks an asset on one chain and mints a representation of it on another. Its security reduces to one question: can someone forge the message that triggers the mint?
What happened to the Syscoin bridge
The Syscoin bridge accepts SPV (Simplified Payment Verification) proofs to confirm that a deposit happened on the source chain before it mints on the destination. On June 11, 2026, an attacker submitted a malformed proof that the relay parser accepted instead of rejecting. The bridge then minted 5 billion SYS against deposits that did not exist.
The failure was not in cryptography but in parsing, the relay trusted a proof it should have thrown out. No public audit record existed for that vulnerable relay path. The Syscoin team published receipts and coordinated a whitehat recovery, and the minted funds were returned. Treat the 5 billion SYS figure as an early estimate until a formal postmortem confirms it.
This is a recurring shape, not a one-off. Bridges and multisig vaults that mint, wrap, or hold pooled value remain the single largest target class in crypto. The rekt.news leaderboard (retrieved 2026-06-11) tracks the largest known losses, recent entries include a $10.7M THORChain drain on May 21, 2026 (THORChain rekt postmortem, retrieved 2026-06-11) and a Gnosis Safe-related loss of roughly $3.98M (per the rekt.news leaderboard, retrieved 2026-06-11). Different protocols, same lesson: pooled or wrapped value is a standing forgery target.
Why a bridgeless swap removes the attack surface
The Syscoin incident worked because a bridge had to prove a deposit happened on another chain, and the proof was forged. A crypto-to-crypto swap with no bridge has no such proof to forge.
- No minting authority, A swap does not issue wrapped tokens. There is no mint function for a malformed proof to trigger.
- No pooled custody, Funds are not parked in a vault waiting to be matched against a proof. There is no standing balance to drain.
- No relay parser to fool, The swap routes the native asset wallet-to-wallet. There is no SPV-proof checkpoint in the middle that an attacker can feed bad input to.
GhostSwap is a no-KYC crypto exchange, no account, no email, no signup. It is non-custodial: funds pass through and are never held. That is not a marketing line in this context; it is the structural reason there is no pooled balance for a bridge-style exploit to mint against.
Bridge mint vs. non-custodial swap
| Feature | Bridge mint | GhostSwap (non-custodial swap) |
|---|---|---|
| Wrapped tokens issued | Yes, mints a representation | No, native asset routed through |
| Pooled custody | Yes, vault holds locked value | No, funds pass through, never held |
| Proof/relay step | Yes, SPV proof checked by relay | No bridge proof in the path |
| Account / KYC | Varies by service | None required |
| Asset coverage | Limited to bridged pairs | 1,600+ pairs across 200+ assets |
| Typical completion | Varies | ~8 min median; ~30 min at p95 |
The pricing is floating-rate from aggregated liquidity, so the rate that settles is the rate when your funds arrive, not the moment you click, typically within the quoted spread.
How to swap out of a bridged asset without an account
If you are holding a wrapped or bridged token and want to move into a native asset like Bitcoin or Monero, the walkthrough is short:
- Pick the pair, choose your source asset and destination. To move into Monero, see the BTC to XMR swap page.
- Enter your receiving address, and a refund address. No account, no email, no identity verification.
- Send the source asset, to the deposit address shown.
- Funds convert, non-custodially, passing through; GhostSwap never holds them.
- Receive the destination asset, at your address, typically in about 8 minutes (up to ~30 at p95).
The live swap widget is on the GhostSwap homepage. Across the service there are 1,600+ pairs live spanning 200+ assets.
FAQ
Q: What caused the Syscoin bridge exploit?
A: A malformed SPV proof slipped past the bridge relay parser on June 11, 2026, which then minted 5 billion SYS against deposits that did not exist. The failure was in proof parsing, not cryptography. The funds were whitehat-recovered.
Q: Were the Syscoin funds recovered?
A: Yes. The Syscoin team published receipts and coordinated a whitehat recovery, and the minted SYS was returned. Treat the 5 billion SYS figure as an early estimate until a formal postmortem confirms it.
Q: How does a non-custodial swap avoid bridge-style exploits?
A: A swap with no bridge issues no wrapped tokens, holds no pooled custody, and has no relay proof to forge. The native asset routes wallet-to-wallet, so there is no mint function or vault balance for an attacker to target.
Q: Do I need an account to swap on GhostSwap?
A: No. There is no account, no email, and no identity verification required to swap. You supply a receiving address and a refund address; funds pass through non-custodially and are never held by GhostSwap.
Move into a native asset without a bridge
If a bridge or vault is the part of the stack you no longer trust, a non-custodial swap removes that piece entirely. Start at the GhostSwap swap widget or go straight to the BTC to XMR pair page.
GhostSwap is not a registered financial service.
