Cysic crypto bridge halted after unauthorized mint of 10M CYS tokens

The Cysic Foundation has suspended its cross-chain bridge following an exploit that resulted in the unauthorized minting of 10 million CYS tokens on the BNB Smart Chain.

According to an incident report published on Sunday, an attacker exploited a processing flaw in the bridge’s message system on Saturday, October 17. Preliminary findings point to unauthorized access to a database supporting the bridge infrastructure. The mint occurred at 12:31:38 UTC, and the recipient address was blacklisted by the token contract roughly an hour later.

The foundation emphasized that the incident was isolated to bridge message processing and minting, stating it did not affect the Cysic mainnet or other operational systems. “The incident did not result in the theft or unauthorized transfer of existing CYS or other assets held in user wallets,” the project stated.

Cysic noted that the mint size alone does not establish the final dollar impact, as token transfers, swaps, and actual losses remain under review. Approximately 2.8 million of the minted CYS remained in the blacklisted address at the time of the report. The foundation has engaged a security firm and plans to publish a follow-up report after its investigation.