Cysic Foundation said its cross-chain bridge suffered a security incident on Oct. 17, allowing an attacker to mint 10 million CYS on BNB Smart Chain without authorization. The team said it has suspended the bridge, blacklisted the related on-chain addresses, and hired a professional security firm to investigate the attack path and fund flows. According to the project’s preliminary findings, the attacker gained unauthorized access to the database used to support the bridge service and then exploited flaws in the related processing logic to submit forged minting messages. Cysic said the incident only affected the bridge’s message-processing and minting functions. Its mainnet and other operating systems were not impacted, and no existing user assets were stolen. As of the latest update, the addresses involved still held about 2.8 million CYS, which has been restricted from transfer. The foundation added that the 10 million CYS minted should not be treated as the final dollar loss, and that the actual loss and the outcome of fund tracing are still under review. The bridge will remain closed until the security review is completed.
According to BlockBeats, the Cysic Foundation said on Oct. 18 that its cross-chain bridge experienced a security incident on Oct. 17, and an attacker minted 10 million CYS on BNB Smart Chain without authorization.
After detecting the anomaly, the project said it suspended the bridge, imposed on-chain blacklist restrictions on the related addresses, and brought in a professional security company to investigate the attack path and the movement of funds.
Preliminary findings
Cysic said its initial investigation shows that the attacker obtained unauthorized access to the database used to support the bridge service and used flaws in the related processing logic to submit forged minting messages.
The foundation said the incident only affected the bridge’s message-processing and minting functions. Cysic’s mainnet and other operating systems were not affected, and no existing user assets were stolen.
Current status
As of the latest update, the related addresses still held about 2.8 million CYS, and those tokens have been restricted from transfer. The project also said the minting of 10 million CYS does not by itself equal the final dollar loss. The actual loss and the results of follow-up fund tracing are still being verified, and the bridge will reopen only after the security review is completed.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
