Decentralized compute network Cysic said in an incident report posted on X that its cross-chain bridge was attacked on Saturday, allowing an attacker to exploit a processing flaw and mint 10 million CYS without authorization on BNB Smart Chain. The bridge has since been paused. According to Cysic’s preliminary findings, the attacker gained unauthorized access to the database supporting the bridge. The mint took place at 12:31:38 UTC, and Cysic blacklisted the recipient address in the token contract at 13:47:52 UTC. At that time, the address still held about 2.8 million CYS, and transfers were restricted. Cysic said the issue was limited to the bridge’s message-processing and minting flow and did not affect the mainnet or other operational systems. The company also said no CYS already held in user wallets, or any other assets, were stolen or moved without authorization. Cysic added that the mint amount alone does not determine the final dollar loss, and token transfers, swaps, and actual losses are still under review. The company said it has hired a security firm and plans to release a follow-up report after the current phase of the investigation ends.
ChainCatcher reported that decentralized compute network Cysic said in an incident report on X that its cross-chain bridge was attacked on Saturday. The attacker exploited a processing flaw to mint 10 million CYS without authorization on BNB Smart Chain, and the bridge has now been paused.
Preliminary findings show the attacker gained unauthorized access to the database that supports the bridge. According to the report, the mint occurred at 12:31:38 UTC. Cysic blacklisted the recipient address in the token contract at 13:47:52 UTC. At that point, the address still held about 2.8 million CYS, and transfers had been restricted.
Cysic said the incident was confined to the bridge’s message-processing and minting components. It said the mainnet and other operational systems were not affected, and no CYS already held in user wallets or other assets were stolen or transferred without authorization.
The company also said the mint amount by itself does not establish the final dollar loss. Token transfers, swaps, and actual losses are still being reviewed. Cysic said it has hired a security firm and plans to publish a follow-up report after the current stage of the investigation is complete.
CYS is used to coordinate incentives for users, compute providers, governance participants, and contributors across the Cysic network.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
