Cysic bridge halted after attacker mints 10 million CYS tokens

Company says mainnet and user wallets unaffected, investigation ongoing

By LineZotpaper

Published18 October 2026

Read Time2 min

Cysic, a blockchain infrastructure project, has suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS tokens on BNB Smart Chain, the company said in an incident report on X. The mint occurred on Saturday, October 17, and Cysic said the incident did not affect its mainnet or other operational systems.

The unauthorized mint took place at 12:31:38 UTC, according to Cysic, which added the recipient address to the token contract’s blacklist at 13:47:52 UTC. About 2.8 million CYS remained at that address, with transfers restricted.

Cysic said preliminary findings point to unauthorized access to a database supporting the bridge. The company stated that the incident was limited to bridge message processing and minting and did not result in the theft or unauthorized transfer of existing CYS or other assets held in user wallets.

The project noted that the mint size alone does not establish the final dollar impact, as token transfers, swaps and actual losses remain under review. Cysic has hired a security firm and plans to publish a follow-up report after the current investigation phase.

CYS is used to coordinate incentives for users, compute providers, governance participants and contributors in Cysic’s network, according to the project’s tokenomics documentation.

Analysis

Why This Matters

The incident highlights ongoing security vulnerabilities in cross-chain bridge infrastructure, a frequent target for attackers in the crypto space.
While Cysic says no user funds were stolen, the unauthorized minting of 10 million tokens could affect token supply and market dynamics if the tokens were to be swapped or sold.
The speed of response — blacklisting the recipient address within about 75 minutes — shows the importance of rapid incident containment.

Background

Cysic is a blockchain project that operates a cross-chain bridge to facilitate token transfers between networks. Cross-chain bridges have been a recurring weak point in crypto security, with several high-profile exploits in recent years. The company's native token, CYS, serves as a utility and governance token within its ecosystem.

Key Perspectives

Cysic: The company says the exploit was contained to bridge message processing and minting, and that no existing user assets were taken. It is working with a security firm to investigate and will release further findings. Security experts and community: The incident is another reminder of the risks inherent in bridge designs, where a single processing flaw can lead to unauthorized token creation. The lack of disclosed dollar loss may raise questions about the eventual impact.

What to Watch

The follow-up report from Cysic’s security firm, which may reveal the root cause and any wider vulnerabilities.
Whether any of the minted tokens were swapped or transferred before the blacklist was applied, and whether losses materialize.
Market reaction to the CYS token, especially if the incident affects holder confidence.

Sources

Cysic crypto bridge halted after unauthorized mint of 10M CYS · Cointelegraph.com News

Checked

12 claims in this story checked against 1 source: 11 supported.

Show each claim

SupportedCysic halted its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain.Cointelegraph.com News: “The company said in a Sunday X incident report that its cross-chain bridge was suspended after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain on Saturday”
SupportedCysic said its mainnet and other operational systems were unaffected.Cointelegraph.com News: “Cysic said the incident was limited to bridge message processing and minting and did not affect the mainnet or other operational systems.”
Partly supportedCysic said user wallets were unaffected.Cointelegraph.com News: ““The incident did not result in the theft or unauthorized transfer of existing CYS or other assets held in user wallets,” it said.”
SupportedCysic's investigation is ongoing.Cointelegraph.com News: “Cysic is investigating an unauthorized issuance on BNB Smart Chain”
SupportedCysic disclosed the incident in a report on X.Cointelegraph.com News: “The company said in a Sunday X incident report that its cross-chain bridge was suspended”
SupportedThe unauthorized mint occurred on Saturday, October 17, 2026.Cointelegraph.com News: “PublishedOct 18, 2026 Cysic said the incident was limited to bridge message processing and minting and did not affect the mainnet or other operational systems.”
SupportedThe mint occurred at 12:31:38 UTC.Cointelegraph.com News: “The mint occurred at 12:31:38 UTC”
SupportedCysic added the recipient address to the token contract's blacklist at 13:47:52 UTC.Cointelegraph.com News: “Cysic added the recipient address to the token contract’s blacklist at 13:47:52 UTC.”
SupportedAbout 2.8 million CYS remained at the recipient address with transfers restricted.Cointelegraph.com News: “About 2.8 million CYS remained at that address, with transfers restricted.”
SupportedCysic's preliminary findings pointed to unauthorized access to a database supporting the bridge.Cointelegraph.com News: “with preliminary findings pointing to unauthorized access to a database supporting the bridge.”
SupportedCysic said the number of tokens minted did not establish the final dollar loss because transfers, swaps and actual losses were still under review.Cointelegraph.com News: “The company said the number minted does not establish the final dollar loss; token transfers, swaps and actual losses remain under review.”
SupportedCYS coordinates incentives for users, compute providers, governance participants and contributors in Cysic's network.Cointelegraph.com News: “CYS coordinates incentives for users, compute providers, governance participants and contributors in Cysic’s network, according to the project’s tokenomics documentation .”