Cysic suspends crypto bridge after unauthorized minting of 10 million CYS
Cysic suspended its cross-chain bridge after an attacker exploited a message-processing flaw to mint 10 million CYS on BNB Smart Chain on Saturday. Preliminary findings indicate that the attacker gained unauthorized access to a database supporting the bridge, enabling the illicit issuance at 12:31:38 UTC.
The company added the recipient address to the token contract’s blacklist at 13:47:52 UTC, just over an hour after the mint. Around 2.8 million CYS remained in the address and was subject to transfer restrictions, although Cysic said it was still examining token movements, swaps and any losses associated with the incident. The face value of the 10 million newly created tokens therefore does not by itself represent the final financial impact.
Cysic said the breach was confined to bridge message processing and minting. Its mainnet and other operational systems were not affected, and investigators found no theft or unauthorized movement of CYS or other assets already held in user wallets. CYS is used to coordinate incentives among users, computing providers, governance participants and other network contributors.
A security firm has been engaged to assist the investigation. Cysic said it would publish a further report after the current phase of the review is complete.
Continue in the app — vote & join in ➔