Commons Bridge 2026 proxy compromise
The Commons Bridge proxy on Base was compromised and approximately 18.45 million SYND were drained or controlled through the affected path. Public reporting placed realized sale proceeds around USD 330,000–400,000. Commons was later wound down and all users were automatically reimbursed with their SYND plus an additional 15 percent.
Incident facts
- Incident title
- Commons Bridge 2026 proxy compromise
- Bridge
- Commons Bridge
- Incident date
- 2026-04-29
- Incident type
- Exploit
- Major incident
- Yes
- Affected chains
- Base, Commons Chain, Ethereum
- Affected assets
- SYND
- Attack category
- Unknown
- Reported loss
- Approximately USD 330,000–400,000 realized proceeds
- Recovery
- None
- Reimbursement
- Completed
- Restart
- Not Reopened
- Current outcome
- Dead After Incident
- Resolution
- Final outcome known
- Last reviewed
- 2026-07-28
- Last verified
- 2026-07-28
Timeline events
Commons Bridge proxy compromised2026-04-29
The Commons Bridge proxy on Base was compromised, enabling unauthorized control or removal of approximately 18.45 million SYND.
Syndicate disclosed Commons Bridge compromise2026-04-29
Syndicate disclosed the bridge compromise, began tracing the attacker, and advised users not to provide liquidity during response.
Commons Bridge operations paused2026-04-29
Commons Bridge operation and related liquidity activity were paused during containment and investigation.
Syndicate began tracing and security investigation2026-04-29
Syndicate engaged security firms and began tracing attacker activity while assessing reserves and affected users.
Syndicate committed reserves for affected users2026-04-29
Syndicate stated that sufficient SYND reserves were available to help affected users while the incident response continued.
Commons users automatically reimbursed2026-05-21
The official shutdown page states that every SYND balance on Commons, including staked SYND and unclaimed rewards, was returned to the corresponding Base wallet plus an additional 15 percent.
Commons network and bridge wind-down announced2026-05-21
Syndicate announced the Commons wind-down alongside the Labs lifecycle update and reimbursement outcome.
Commons Bridge permanently shut down2026-05-21
The official Commons page states that Commons has shut down and no user claim action is required.
Evidence records
- Syndicate Commons Bridge compromise statementSyndicate · Tier 1 · 2026-04-29
- Syndicate Labs wind-down and Commons reimbursement threadSyndicate · Tier 1 · 2026-05-21
- Commons has shut downSyndicate · Tier 1 · 2026-05-21
- Syndicate exploit linked to Commons Bridge compromiseThe Block · Tier 2 · 2026-04-30
- Syndicate Commons Bridge Upgrade CompromiseDARKNAVY · Tier 2 · 2026
- Syndicate Labs to wind down operationsThe Block · Tier 2 · 2026-05-21
Known unknowns
- A first-party final technical postmortem was not located.
- Independent analysis attributes the incident to a privileged proxy-upgrade compromise, but BIR does not promote that narrow category as final without primary confirmation.
- The exact direct user-loss amount before treasury reimbursement is not separately established.