Cysic Halts Cross-Chain Bridge After Unauthorized Mint of 10M CYS on BNB Chain

Cysic suspended its cross-chain bridge after an attacker exploited a message-processing flaw to mint 10M CYS on BNB Smart Chain on Saturday at 12:31:38 UTC. Preliminary findings indicate the incident stemmed from unauthorized access to a database supporting the bridge. Cysic added the recipient address to the token contract's blacklist at 13:47:52 UTC, restricting transfers on the roughly 2.8M CYS remaining at that address. The company stated the incident was isolated to bridge message processing and minting, leaving the Cysic mainnet and other operational systems unaffected. Cysic noted the 10M token mint figure alone does not establish the final dollar loss. Token transfers, swaps, and actual financial losses remain under investigation alongside an external security firm. "The incident did not result in the theft or unauthorized transfer of existing CYS or other assets held in user wallets." — Cysic