Cysic has suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain, according to the project’s incident report posted on X on Sunday. The company said preliminary findings point to unauthorized access to a database that supports the bridge, though the investigation is still ongoing.
The project said the unauthorized mint took place at 12:31:38 UTC on Saturday. At 13:47:52 UTC, Cysic added the recipient address to the token contract blacklist. Roughly 2.8 million CYS remained at that address, and transfers from it were restricted.
Cysic said the issue was confined to bridge message processing and minting, and did not affect the mainnet or other operational systems. It also said the incident did not lead to the theft or unauthorized transfer of existing CYS or any other assets held in user wallets. The company added that the mint amount alone does not determine the final dollar impact, as token transfers, swaps and actual losses are still under review. A security firm has been hired, and Cysic said it plans to release a follow-up report after the current phase of the investigation.
Cysic has suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain, the company said in an incident report posted on X on Sunday.
According to Cysic, preliminary findings indicate the incident may be tied to unauthorized access to a database that supports the bridge.
Timeline released by Cysic
The unauthorized mint took place at 12:31:38 UTC on Saturday, the company said. Cysic added the recipient address to the token contract blacklist at 13:47:52 UTC. About 2.8 million CYS remained at that address, with transfers restricted.
Company says mainnet was not affected
Cysic said the incident was limited to bridge message processing and minting and did not affect the mainnet or other operational systems.
“The incident did not result in the theft or unauthorized transfer of existing CYS or other assets held in user wallets,” the company said.
According to the project’s tokenomics documentation, CYS is used to coordinate incentives for users, compute providers, governance participants and contributors across the Cysic network.
Dollar impact still under review
The company said the number of tokens minted does not by itself establish the final dollar loss. Token transfers, swaps and actual losses are still being reviewed.
Cysic said it has hired a security firm and plans to publish a follow-up report after the current investigation phase is complete.
This article was originally published by Bit.Fan. For more cryptocurrency news and market insights, visit www.bit.fan. Disclaimer:
The market information, project data, and third-party content displayed on this platform are for industry information sharing only and do not constitute any form of investment advice or return commitment.
Cryptocurrency trading carries high risks. Users should fully assess their risk tolerance and make independent decisions. All profits, losses, and legal responsibilities are borne by the users themselves.
