Cysic Cross-Chain Bridge Hacked, 10 Million CYS Unauthorizedly Minted

Huo Xing Finance reports that the decentralized computing network Cysic issued an incident report on X, stating that its cross-chain bridge was attacked on Saturday, with the attacker exploiting a processing vulnerability to unauthorized mint 10 million CYS on BNB Smart Chain. The cross-chain bridge has since been suspended. Preliminary investigations revealed that the attacker gained unauthorized access to the database supporting the cross-chain bridge. The report indicates that the minting occurred at UTC 12:31:38, and Cysic added the receiving address to the token contract blacklist at 13:47:52. At that time, the address still held approximately 2.8 million CYS, and transfers from the address have been restricted. Cysic emphasized that the incident was limited to the message processing and minting functions of the cross-chain bridge; it did not affect the mainnet or other operational systems, nor did it result in any theft or unauthorized transfer of CYS or other assets already held in user wallets. Cysic stressed that the minted amount alone does not determine the final dollar loss, as ongoing investigations are still evaluating related token transfers, exchanges, and actual financial impact. The company has engaged a security firm and plans to release a follow-up report after the current investigation phase is complete. CYS is used to coordinate incentives among users, compute providers, governance participants, and contributors within the Cysic network.