Cysic Suspends Bridge After 10 Million CYS Mint

Cysic suspended its cross-chain bridge after an attacker minted 10 million unauthorized CYS tokens on BNB Smart Chain, the project said, reporting that about 2.8 million tokens remained in a restricted wallet when it blacklisted the receiving address. The incident occurred October 17, and the bridge remains closed pending a security review, with no reopening date announced. In an October 18 incident report, Cysic said the mint was recorded at 12:31:38 UTC. The foundation’s preliminary findings point to unauthorized access to a database supporting the bridge and a vulnerability in message-processing logic that allowed a fraudulent mint instruction. The report did not detail the precise access method or the complete technical path. Cysic said it blacklisted the receiving address at 13:47:52 UTC, about 76 minutes after the mint. Approximately 2.8 million CYS remained there and were prevented from further transfers through that address. The remaining 7.2 million tokens had moved out of it, but that figure alone does not establish how many were sold, recovered or ultimately retained by the attacker. Transaction records reviewed in reporting traced transfers from the address and...