Cysic Cross-Chain Bridge Attacked: 10 Million CYS Unauthorizedly Minted on BNB Chain

On October 18, the Cysic Foundation issued an incident report stating that a security incident occurred at its cross-chain bridge on October 17, during which an attacker minted 10 million CYS tokens without authorization on the BNB Smart Chain. After detecting the anomaly, the project team suspended the cross-chain bridge, added the involved addresses to an on-chain blacklist, and engaged a professional security firm to investigate the attack vectors and fund flows.

Preliminary findings show that the attacker gained unauthorized access to the database powering the cross-chain bridge service and exploited flaws in its processing logic to submit forged minting transactions. The incident was isolated to the bridge's message processing and minting functionality; the Cysic mainnet and other operational systems remain unaffected, and user assets have not been compromised.

As of now, the implicated addresses hold approximately 2.8 million CYS and are restricted from transferring them. The project team noted that the 10 million CYS minted does not directly translate to final USD losses, as actual damages and follow-up tracking results are still being verified. The cross-chain bridge will relaunch once security reviews are fully completed.