Crypto16 October, 20261 min read
Cysic Halts Cross-Chain Bridge After Attacker Mints 10 Million CYS on BNB Smart Chain
This article is an automated aggregation of coverage from news outlets. Our editorials offer in-depth analysis curated by the NewsCord team.
An attacker minted 10 million CYS on BNB Smart Chain via the bridge. Cysic halted the cross-chain bridge and suspended bridge message processing.
Save coverage image
Where the coverage agrees
Explore source coverage 2 source types
Directory totals describe our source library, not outlets checked for this story.
Bridge paused after mint
Cysic halted its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain on Saturday, with preliminary findings pointing to unauthorized access to a database supporting the bridge. Cysic said the mint occurred at 12:31:38 UTC and that it added the recipient address to the token contract’s blacklist at 13:47:52 UTC.
Cysic stated that about 2.8 million CYS remained at that address, with transfers restricted. Cysic said the incident was limited to bridge message processing and minting and did not affect the mainnet or other operational systems.
No wallet theft claim
Cysic told readers that the incident did not result in the theft or unauthorized transfer of existing CYS or other assets held in user wallets. Cysic said the number minted does not establish the final dollar loss, and it kept token transfers, swaps and actual losses under review.
Pluang’s market news page described the same bridge attack as unauthorized creation of 10 million CYS tokens on the BNB Chain and said the bridge was immediately paused. Pluang also said 2.8 million of the forged tokens were locked at a specific address with a blacklist preventing transfers while mainnet and user wallets were unaffected.
Investigation and next steps
Cysic said it was investigating the unauthorized issuance on BNB Smart Chain and that it had hired a security firm to investigate and track the stolen tokens. Cysic said it planned to publish a follow-up report after the current investigation phase.
Cysic’s incident report framed the bridge suspension as a response to an attacker exploiting a processing flaw to mint 10 million CYS on BNB Smart Chain. Cysic said the incident was limited to bridge message processing and minting, while it kept bridge service restrictions in place as it pursued its investigation.