Cysic suspended its cross-chain bridge following an unauthorized mint of 10 million CYS tokens on the BNB Smart Chain. The incident occurred on Saturday at 12:31:38 UTC, with the company identifying a processing flaw and unauthorized access to a database as the likely cause.
The project team added the recipient address to the token contract blacklist by 13:47:52 UTC. Approximately 2.8 million CYS tokens remain at the address with restricted transfer capabilities. Cysic stated that the total number of minted tokens does not reflect the final financial impact.
The company confirmed that the breach was restricted to bridge message processing and minting functions. The mainnet and other operational systems remain unaffected, and no existing assets in user wallets were stolen or transferred without authorization.
Cysic has engaged a security firm to conduct a formal investigation into the exploit. The team plans to release a detailed follow-up report once the current phase of the inquiry is complete to clarify the extent of the losses.
