Cysic said its cross-chain bridge was attacked, with BNB Chain illicitly minted on 10000000 tokens CYS, and bridge services have been suspended.
Article
Cysic disclosed that its cross-chain bridge was attacked,BNB Chain were illicitly minted on 10000000 tokens CYS
PANews October 18 According to reports,Cysic Foundation issued a security incident announcement stating that the Cysic cross-chain bridge October 17 experienced a security incident. The attacker exploited unauthorized access to a database related to the bridging service and flaws in processing logic to illicitly mint BNB Chain on 10000000 tokens CYS. The incident occurred on the same day 12: 31: 38（UTC). Cysic stated that the incident affected only the cross-chain bridge's message-processing and token-minting functions, and did not affect the Cysic mainnet or other operating systems; existing user assets were not stolen. The project has suspended cross-chain bridge services and, on the same day 13: 47: 52（UTC), added the involved receiving address to the CYS token contract blacklist. Transfers of approximately 2800000 tokens remaining at the address CYS have been restricted. Cysic has engaged a professional security firm to investigate the attack path and trace the assets...
Key points
01
PANews reported that Cysic Foundation issued a security incident announcement.
02
The announcement stated that the Cysic cross-chain bridge October 17 experienced a security incident.
03
The announcement stated that the attacker exploited unauthorized access to a database related to the bridging service and flaws in processing logic to illicitly mint BNB Chain on 10000000 tokens CYS。
04
The incident occurred on the same day 12: 31: 38（UTC）。
05
Cysic stated that the incident affected only the cross-chain bridge's message-processing and token-minting functions, and did not affect the Cysic mainnet or other operating systems; existing user assets were not stolen.
06
The project has suspended cross-chain bridge services and, on the same day 13: 47: 52（UTC), added the involved receiving address to the CYS token contract blacklist.
07
The announcement stated that transfers of approximately 2800000 tokens CYS remaining at the address have been restricted.
08
Cysic has engaged a professional security firm to investigate the attack path.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
A cross-chain bridge is used to transmit messages or process tokens between different chains. According to Cysic, the attacker used unauthorized database access and a processing-logic flaw to cause BNB Chain to have unauthorized minted CYS. The project subsequently suspended the cross-chain bridge and restricted the involved address from transferring the remaining tokens.
Why it matters to readers
Illicit minting increases the supply of unauthorized tokens and exposes access-control and processing-logic risks in cross-chain bridges. Suspending services and restricting transfers from the address are the current response measures, but the ultimate impact still depends on the investigation and the disposition of the illicitly minted tokens.
Users holding or using CYS and its cross-chain bridge should monitor the official investigation, the destination of the illicitly minted tokens, restoration of bridge services, and subsequent security measures. The original report states that existing user assets were not stolen, but this claim has not yet been independently verified.
Risks and unknowns
The material is PANews' retelling of Cysic Foundation announcement and does not provide the full announcement or independent on-chain verification.
The original text is truncated at the end; the full progress of the investigation and asset tracing is unknown.
10000000 illicitly minted tokens CYS Among them, apart from approximately 2800000 tokens remaining at the involved address, the destination and disposition of the other tokens were not specified.
Related Developments
Loading event timeline…
It is unknown whether the cross-chain bridge vulnerability has been fully remediated, when services will resume, and whether a security audit has been completed.
Both “Cysic’s mainnet and other operational systems were unaffected” and “user assets were not stolen” are statements made by Cysic.
Related concepts
Cross-Chain Bridge
A tool that connects different blockchain networks and supports cross-network token transfers or communication.
