10 Million CYS Tokens Minted Without Authorization, Prompting Cysic Bridge Shutdown
According to Cysic, the security breach was confined to the bridge's message processing and token minting functions, leaving the mainnet and other operational infrastructure unaffected.
An investigation is currently underway at Cysic following an unauthorized token issuance on BNB Smart Chain, with the company emphasizing that the quantity of minted tokens does not directly translate to the financial impact of the security breach.
In an incident disclosure posted to X on Sunday, the company revealed that operations on its cross-chain bridge were halted following Saturday's exploit, during which a malicious actor leveraged a processing vulnerability to create 10 million CYS tokens on BNB Smart Chain, with early investigation results suggesting unauthorized database access as the entry point for the attack on the bridge infrastructure.
The unauthorized minting event took place at precisely 12:31:38 UTC, with Cysic's team responding by adding the receiving wallet address to the token contract's blacklist at 13:47:52 UTC. Approximately 2.8 million CYS tokens were still located at the identified address when restrictions were implemented, preventing further transfers.
According to Cysic's published tokenomics documentation, CYS serves as the coordination mechanism for incentivizing various network participants, including users, compute providers, those involved in governance activities, and other contributors within the Cysic ecosystem.
The company emphasized that the security incident's scope was confined to the bridge's message processing functionality and the minting mechanism, with no impact observed on the mainnet infrastructure or any other operational systems. "The incident did not result in the theft or unauthorized transfer of existing CYS or other assets held in user wallets," it said.
According to the company's statement, the quantity of tokens that were minted cannot serve as a definitive indicator of the ultimate financial damage; an ongoing review is examining token transfers, swap activities, and the actual extent of losses incurred. Cysic has engaged the services of a specialized security firm and has committed to releasing an additional report once the present phase of the investigation reaches completion.