Cysic suspends bridge after 10 million CYS tokens minted without permission
Cysic stops bridge after 10 million tokens appear out of nowhere
Cysic Foundation has suspended its cross-chain bridge after an attacker minted 10 million CYS tokens on BNB Smart Chain, a blockchain network. Minting means creating new tokens that did not previously exist.
The foundation described the incident in an incident report posted on X on Sunday. It said a processing flaw was exploited and that early findings point to unauthorized access to a database that supports the bridge. A bridge is a service that moves messages and tokens between different blockchains.
Cysic said the problem was confined to bridge message processing and minting, and that its mainnet and other operating systems were not affected.
Key numbers from the incident
- The unauthorized mint happened at 12:31:38 UTC on Oct. 17.
- Cysic added the receiving address to the token contract's blacklist at 13:47:52 UTC, roughly 76 minutes later.
- About 2.8 million CYS remained at that address, with transfers restricted.
- Roughly 160.8 million CYS tokens are in circulation, according to CoinMarketCap data.
What Cysic says happened to user funds
Cysic said the incident did not involve the theft or unauthorized movement of existing CYS or any other assets held in user wallets. It also stressed that the number of tokens minted does not by itself show the dollar impact of the incident.
Token transfers, swaps and actual losses are still under review, the foundation said. It has hired an unnamed security firm to help investigate and plans to publish a follow-up report once the current phase of the investigation is complete.
What is still unclear
The total financial damage is not yet known. Cysic has explicitly said the mint size alone does not establish the final dollar loss, and no confirmed loss figure has been published. The name of the security firm has not been disclosed, and no suspect has been identified in the supplied material.
Why the size of the mint needs context
CYS is the token used across Cysic's network. According to the project's tokenomics documentation, it coordinates incentives for users, compute providers, governance participants and contributors.
With about 160.8 million tokens in circulation, 10 million newly minted tokens represent a noticeable addition to supply. However, Cysic says transfers from the blacklisted address are restricted, and the final impact depends on findings still to come from the investigation.
What happens next
Cysic said it will publish a follow-up report after the current investigation phase. The bridge remains suspended in the meantime, according to the foundation's report.
Sources
Newisty Editorial Team covers technology, cryptocurrency, digital products, online platforms, developer tools and the wider digital economy. Our content is researched from official sources, company announcements, public documentation, market data and other primary or reputable sources. Articles are reviewed and edited before publication for clarity, accuracy and useful context.