Cysic suspended its cross-chain bridge on Oct. 18 after an attacker minted 10 million unauthorized CYS tokens on BNB Smart Chain and moved proceeds worth about $727,000 to Ethereum. The project said its preliminary findings pointed to unauthorized database access and a processing-logic vulnerability that enabled a fraudulent mint message.
Unauthorized mint triggers Cysic bridge suspension
According to Cysic’s incident report , the project took its bridge offline after discovering an unauthorized issuance and halted operations while assessing the incident.
The preliminary account attributed the issue to unauthorized database access and message-processing logic, rather than a broader network failure. Cysic has not announced a reopening date.
Blacklist leaves 7.2 million CYS available for conversion
The unauthorized mint took place at 12:31:38 UTC on Oct. 17, according to Cointelegraph . Cysic blacklisted the recipient address at 13:47:52 UTC, a gap of just over 76 minutes.
About 2.8 million CYS were frozen through that action. On-chain analysis cited by The Block found that approximately 7.2 million CYS had already been sold before the blacklist was applied.
Swap-and-bridge route delivers 306.6 ETH to Ethereum
The proceeds from the token sales were routed through SWFT Bridgers, Mayan and deBridge, according to the on-chain analysis. Roughly 306.6 ETH then arrived on Ethereum, valued at about $727,000 at the time cited in the report.
That flow means most of the fraudulently minted supply had been converted before the recipient address was frozen, while the remaining approximately 2.8 million CYS stayed blocked.
Bridge stays closed for external security review
Cysic said the incident was confined to bridge message-processing and minting functions, and said its mainnet and existing user assets were not affected. Those statements remain the project’s assessment of the incident’s scope.
The bridge will remain closed pending a security review and an investigation by an external security firm, Cysic said. Reopening is therefore tied to the completion of those reviews rather than to a stated timetable.
Disclaimer: This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.
