Cysic cross-chain bridge suffered unauthorized minting of 10 million CYS, the bridge has been suspended

The decentralized computing network Cysic released an event report on platform X stating that its cross-chain bridge was attacked on Saturday. The attacker exploited a processing vulnerability to unauthorizedly mint 10 million CYS on the BNB Smart Chain, and the cross-chain bridge has now been suspended. Preliminary investigation results indicate that the attacker accessed the database supporting the cross-chain bridge without authorization.

The report shows that the minting occurred at 12:31:38 UTC, and Cysic added the receiving address to the token contract blacklist at 13:47:52. At that time, the address still held approximately 2.8 million CYS, and transfers have been restricted. Cysic stated that this incident was limited to the message processing and minting aspects of the cross-chain bridge and did not affect the mainnet or other operational systems, nor did it result in the theft or unauthorized transfer of CYS or other assets already in user wallets.

Cysic emphasized that the quantity of minted tokens alone cannot determine the final dollar loss, and related token transfers, exchanges, and actual losses are still under verification. The company has hired a security agency and plans to release a follow-up report after the current investigation phase concludes. CYS is used to coordinate incentives for users, computing power providers, governance participants, and contributors within the Cysic network.