According to Cysic Foundation's incident report, an attacker minted 10 million unauthorised CYS tokens on BNB Smart Chain on Saturday (October 17) through the protocol's cross-chain bridge. The attacker gained access to a database supporting the bridge infrastructure and exploited a flaw in the minting logic to submit a fraudulent message at 12:31:38 UTC, sending all tokens to a single address. Cysic blacklisted the receiving address at 13:47:52 UTC, freezing approximately 2.8 million CYS still held there.

Of the remaining 7.2 million tokens, the attacker had already sold them for USDT and BNB. On-chain records show approximately 588,315 USDT and 306.6 ETH (worth roughly US$727,000) were bridged to Ethereum from the proceeds. Cysic said the incident was confined to the bridge's message processing and minting functions, with mainnet consensus and block production unaffected. The bridge will remain closed until a security review is complete.

View Source

Disclaimer: This content is for informational purposes only and does not constitute investment advice or encourage the buying or selling of crypto assets. It is intended to provide information about industry developments and is not directly related to the services offered by Gate TR. Although information obtained from third-party sources has been carefully reviewed, Gate TR assumes no responsibility for any errors or omissions. Crypto assets involve high risks and may experience significant price fluctuations. Before making any investment decisions, you should assess your financial situation and risk tolerance, conduct your own research, and make decisions independently.