Cysic Halts Crypto Bridge After Attacker Mints 10 Million CYS Tokens

Cysic has suspended its cross chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain on Saturday. The company said early findings point to unauthorized access to a database that supports the bridge. The mint took place at 12:31:38 UTC, and the recipient address was added to the token contract’s blacklist at 13:47:52 UTC. About 2.8 million CYS remained at that address, with transfers restricted.

Impact on Cysic Users and Mainnet

Cysic said the incident was limited to bridge message processing and minting, and that the mainnet and other operational systems were not affected. It added that no existing CYS or other assets in user wallets were stolen or moved without permission. The company stressed that the number of tokens minted does not set the final dollar loss, since transfers, swaps and actual losses are still under review.

Investigation and Next Steps

Cysic has hired a security firm and plans to publish a follow up report once the current phase of the investigation ends. CYS is the token that coordinates incentives for users, compute providers, governance participants and contributors across the Cysic network.