Cysic suspended its cross-chain bridge after an attacker minted 10 million CYS on BNB Smart Chain without authorization. The company says the mainnet and user wallets were not affected, while the dollar impact remains under review.
Cysic suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain on Saturday. The company laid out the incident in a Sunday report on X, and preliminary findings point to unauthorized access to a database supporting the bridge.
Timeline of the mint and the freeze
The mint occurred at 12:31:38 UTC, and Cysic added the recipient address to the token contract's blacklist at 13:47:52 UTC. About 2.8 million CYS remained at that address, with transfers restricted.
Cysic said the incident was limited to bridge message processing and minting and did not affect the mainnet or other operational systems. According to Cysic: "The incident did not result in the theft or unauthorized transfer of existing CYS"
Dollar impact still unclear
The size of the mint does not settle the loss. Cysic said the number minted does not establish the final dollar loss, and token transfers, swaps and actual losses remain under review. The company has hired a security firm and plans to publish a follow-up report after the current investigation phase.
Crypto Briefing adds that the bridge is offline indefinitely, with no timeline given for its return. It also reports that Cysic has not confirmed the full attack vector or the root cause, and that early findings point to a potential link to unauthorized database access along with weaknesses in the bridge's processing logic.
Supply context
CYS has a maximum supply of 1 billion tokens, according to Crypto Briefing, and around 160.8 million were in circulation following the token generation event. Against that circulating supply, the 10 million unauthorized tokens are a meaningful addition.
Sources: Cointelegraph, Crypto Briefing
Trading involves risk.
Risk Disclaimer
