FreeTheAI

Cysic Suspends Cross-Chain Bridge Following $727,000 Token Exploit

BearishMedium impact

Blockchain hardware and network provider Cysic suspended its cross-chain bridge after an unauthorized actor exploited database access and message-processing logic to mint 10 million CYS tokens on BNB Chain. The attacker sold 7.2 million of those tokens across decentralized exchanges and moved approximately $727,000 worth of ether to the Ethereum network before Cysic blacklisted the receiving wallet.

The security breach was restricted to the bridge's minting and message-processing logic and did not compromise the Cysic mainnet or existing user funds. Cysic blacklisted the attacker's wallet address 76 minutes after the initial minting event, freezing the remaining 2.8 million CYS tokens held on BNB Chain. However, the blacklisting does not affect the ether successfully transferred to Ethereum.

Cysic has kept the bridge closed while an external security firm conducts an investigation into the vulnerability and traces the funds. The project plans to issue a follow-up statement detailing verified financial losses and updates on recovery efforts once the security review is complete.

Key points

  • An attacker exploited database and bridge logic to mint 10 million unauthorized CYS tokens on BNB Chain.
  • The perpetrator sold 7.2 million tokens and bridged roughly $727,000 in ether to the Ethereum network.
  • Cysic blacklisted the attacker's wallet address on BNB Chain, freezing the remaining 2.8 million CYS tokens.
  • User assets on the mainnet were not impacted, and the bridge will stay offline pending a security audit.

Written by our AI from expert market sources across the web. It can contain mistakes: check the facts before acting on them. Write-ups powered by the free AI API at FreeTheAI.org

How we writeDisclaimer

Questions and answers

What caused the Cysic bridge exploit?

An attacker gained unauthorized access to a supporting database and exploited processing logic to send a fraudulent mint message on BNB Chain.

Were user funds stolen during the Cysic attack?

No, Cysic confirmed that existing user assets were not stolen, as the exploit was limited to the bridge and did not affect the mainnet.

What is the status of Cysic's cross-chain bridge?

The bridge is suspended while an independent security firm completes a full audit and traces the transferred funds.