Summary
- Cysic suspended its cross-chain bridge following an exploit that enabled unauthorized minting of 10 million CYS tokens on BNB Chain.
- The foundation blacklisted the attacker’s wallet, restricting approximately 2.8 million CYS tokens, while confirming existing user assets remained safe.
- Cysic engaged security investigators to trace stolen funds, assess financial losses, and review bridge vulnerabilities before restoring cross-chain services.
Cysic has shut down its cross-chain bridge following a security breach that allowed an attacker to mint 10 million CYS tokens. The October 17 incident affected the bridge’s minting system on BNB Smart Chain, prompting emergency restrictions and an external investigation.
According to the Cysic Foundation’s incident report, the attacker exploited weaknesses in bridge processing after gaining unauthorized database access. The breach occurred at 12:31:38 UTC, when a fraudulent message triggered the creation of 10 million CYS tokens.
Significantly, the foundation confirmed that attackers did not steal existing user assets or compromise the Cysic mainnet. Mainnet consensus, block production, transaction confirmations, and Ethereum Virtual Machine execution remained operational throughout the incident.
Investigators are examining subsequent token transfers and swaps to establish the financial impact. Cysic clarified that the unauthorized minting amount does not represent the final dollar value of losses.
Also Read: Bitcoin Holds Above $82,700 as Solana Leads Major Crypto Market Gains
Cysic Blacklists Attacker Address as Security Investigation Expands
We're back on X.
— 36Crypto (@36Crypto1) August 21, 2026
Our previous account (36crypto2) is currently unavailable while we continue working through the appeal process. In the meantime, this is our new official account. While you are on this page, please support us by sharing and following.
Cysic identified the recipient wallet as 0xA4e1827Fe2664fD0797a55e442b2e2639449C255, which received the newly minted tokens through the compromised bridge.
Following detection, the foundation activated emergency procedures and added the address to its BNB Smart Chain token blacklist. The restriction took effect at 13:47:52 UTC on October 17, approximately 76 minutes after the unauthorized minting.
Consequently, approximately 2.8 million CYS tokens remaining in the identified wallet became subject to transfer restrictions. The foundation has not confirmed the final destination or recovery status of tokens transferred before the blacklist took effect.
Meanwhile, Cysic engaged an independent security firm to investigate the attack, trace associated wallets, and examine suspicious transactions. Investigators are reviewing database access, message verification procedures, permission settings, and related asset records.
Preliminary findings link the breach to unauthorized database access and a vulnerability within the bridge’s message processing logic. Nevertheless, the foundation has not established the complete attack sequence or confirmed the underlying security failure.
Cysic Outlines Bridge Recovery Plans and Further Security Updates
The bridge remains unavailable while investigators assess potential weaknesses across its operational workflow. Cysic will restore cross-chain services only after completing its security review and required remediation measures.
Additionally, the foundation plans to publish another incident report detailing verified losses, tracing progress, and security improvements. Users must rely on official announcements for information about bridge availability and affected tokens.
Cysic’s response has restricted transfers from the identified wallet while investigators assess the broader impact of the unauthorized minting. The foundation has not announced a reopening date, pending completion of its security review.
Also Read: Verified Emeralds (VEREM) Price Prediction 2026–2030: Can VEREM Hit $50 Soon?
