Cysic's CYS bridge hit by 10M-mint ghost: attacker printed tokens, market did the haunting 🕯️

Cysic is investigating an unauthorized token issuance on BNB Smart Chain after an attacker exploited a processing flaw in its cross-chain bridge to mint 10 million CYS over the weekend. The project disclosed the incident in a Sunday X post, saying preliminary findings point to unauthorized access to a database supporting the bridge, and that the bridge has been suspended pending the probe.

According to Cysic's incident timeline, the mint occurred at 12:31:38 UTC on Saturday and the recipient address was added to the token contract's blacklist at 13:47:52 UTC. About 2.8 million CYS remained at that address at the time of blacklisting, with transfers restricted. CYS is the native token of the Cysic network, used to coordinate incentives for users, compute providers, governance participants and contributors, per the project's tokenomics documentation.

Cysic stressed that the damage was confined to bridge message processing and minting and did not extend to the mainnet or other operational systems. "The incident did not result in the theft or unauthorized transfer of existing CYS or other assets held in user wallets," the project said.

The company also pushed back on early dollar-loss estimates, noting that the 10 million CYS figure alone does not capture the actual impact because subsequent token transfers, swaps and realized losses are still being reviewed. Cysic has engaged a security firm and said it intends to publish a follow-up report after the current investigation phase is complete.