According to Syndicate Labs, on May 1, a private key leak resulted in malicious upgrades to the company's cross-chain bridge contracts on two blockchains. Attackers drained approximately 18.5 million SYND tokens (worth around $330,000) and about $50,000 in user tokens. The incident affected only specific chains, with other networks remaining unaffected.
Syndicate Labs pledged full reimbursement to all affected users, including returning the 18.5 million SYND and providing additional compensation. The company has initiated security upgrades including enhanced private key encryption, tightened access controls, and plans to implement hardware or multi-signature mechanisms and upgrade path monitoring to prevent similar incidents.