Incident case

Synapse 2021 nUSD metapool exploit

An attacker manipulated the Avalanche nUSD metapool virtual price by approximately 12.5% through a bug in the Saddle-derived metapool implementation. The attacker attempted to move approximately $8.2 million in nUSD through the bridge while validators were offline; the malicious transaction was not processed and affected liquidity providers were to be made whole.

reviewedcurrent

Incident facts

Incident title
Synapse 2021 nUSD metapool exploit
Bridge
Synapse Protocol
Incident date
2021-11-06
Incident type
Exploit
Major incident
Yes
Affected chains
Avalanche, Unknown
Affected assets
nUSD, USDC, Unknown
Attack category
Metapool Virtual Price Bug
Reported loss
No ultimate fund loss reported; approximately $8.2 million nUSD protected
Amount confidence
High
Loss amount basis
Official Synapse Postmortem
Recovery
Funds Protected
Reimbursement
In Progress
Restart
Reopened
Current outcome
Active After Incident
Postmortem
Full
Resolution
Unresolved
Last reviewed
2026-06-15
Last verified
2026-06-15

Amount and valuation

Synapse stated that no funds were ultimately lost because validators did not process the attacker's approximately $8.2 million nUSD bridge transaction.

Approximately $8.2 million is the protected malicious transfer amount, not realized user loss.

Why this remains unresolved

Timeline events

  • Synapse paused metapools, AMM, and bridge after nUSD manipulation2021-11-06

    Synapse identified abnormal nUSD metapool pricing, paused pools across six chains, and coordinated validators to go offline.

    Metapool Exploit Detected And Network PausedHigh

    The bug was in the Saddle-derived metapool implementation, not the core bridge contracts.

  • Approximately $8.2 million nUSD transfer left unprocessed2021-11-06

    Validators did not process the attacker's approximately $8.2 million nUSD bridge transaction, preserving the funds for affected liquidity providers.

    Malicious Bridge Transaction BlockedHigh

    The protected amount is not realized protocol or user loss.

  • Synapse restored the bridge and began pool migration2021-11-07

    New pools were deployed, validators returned online, pending transactions were processed, and migration away from the vulnerable metapool design began.

    Bridge ReopenedHigh

    Final liquidity-provider distribution completion remains unverified. Event type normalized from legacy descriptive value bridge_restored_and_liquidity_migration_started.

Evidence records

Source tiers describe evidence authority, not certainty for every claim. Tier 1 is the strongest source class; Tier 2 and Tier 3 provide progressively more secondary or supporting context. Source notes define what each record actually supports.

Known unknowns

Independent incident archive

Help maintain incident aftermath records

Support recovery, reimbursement, restart, migration, shutdown, evidence, and correction checks.

Support BIR
Record maintenance

Report a correction

Report missing evidence, incorrect dates, outcome changes, recovery details, reimbursement status, or broken links. GitHub Issues are preferred for structured review; the Google Form is available if you do not use GitHub.