Cysic Probes Unauthorized Token Minting on BNB Smart Chain

The cross-chain bridge handled by Cysic was suspended after an attacker exploited a vulnerability in the transaction processing system. This led to the unauthorized minting of 10 million CYS tokens on BNB Smart Chain last Saturday. Preliminary findings indicate that the attacker gained illicit access to the database supporting the bridge.

The token minting took place at 12:31:38 UTC. Shortly after, at 13:47:52 UTC, Cysic blacklisted the recipient address within the token’s smart contract. Approximately 2.8 million CYS tokens still remain in that address, with further token transfers from it now restricted.

According to the project's tokenomics documentation, CYS tokens are used to incentivize various participants in the Cysic network, including users, compute providers, governance members, and contributors.

Cysic confirmed that the breach was confined to the bridge’s message processing and token minting operations. The core blockchain network and other critical systems were not compromised. The company emphasized that no existing CYS tokens or other assets stored in user wallets were stolen or transferred without authorization.

The organization pointed out that the total volume of minted tokens does not directly equate to total financial losses. They are still reviewing token movements, swaps, and any actual financial damages resulting from the event. To aid the investigation, Cysic engaged a security firm and plans to release a detailed follow-up report once the current analysis is complete.

Cysic’s investigation into the unauthorized token issuance aims to clarify the extent of the breach and its financial consequences, ensuring transparent communication with the community and stakeholders.