Cysic Halts Crypto Bridge After Unauthorized Mint of 10 Million CYS on BNB Smart Chain

Cysic Foundation said in an X incident report that it suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain on Saturday. Preliminary findings point to unauthorized access to a database supporting the bridge.
The mint occurred at 12:31:38 UTC on Oct. 17, and Cysic added the recipient address to the token contract's blacklist at 13:47:52 UTC. About 2.8 million CYS remained at that address, with transfers restricted. There are roughly 160.8 million tokens in circulation, according to CoinMarketCap.
Cysic said the incident was limited to bridge message processing and minting and did not affect the mainnet or other operational systems. "The incident did not result in the theft or unauthorized transfer of existing CYS or other assets held in user wallets," it said.
The foundation said the mint size alone does not establish the final dollar loss, and that token transfers, swaps and actual losses remain under review. Cysic has hired an unnamed security firm and plans to publish a follow-up report after the current investigation phase.