Skip to content
Cysic Cross-Chain Bridge Hacked; 10M CYS Minted Unauthorized

Cysic Cross-Chain Bridge Hacked; 10M CYS Minted Unauthorized

First seen 18 Oct 2026, 15:07 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 18, 2026 at 16:38 UTC
  • •10 million CYS tokens were unauthorizedly minted on the BNB Smart Chain.
  • •The attack exploited a vulnerability in the bridge's processing logic.
  • •User assets on the Cysic mainnet remain unaffected, with the bridge suspended for security review.

On October 17, 2026, the Cysic Foundation reported a security incident involving the unauthorized minting of 10 million CYS tokens on the BNB Smart Chain. The attacker exploited a vulnerability in the bridge's processing logic, gaining access to the database and submitting forged minting messages. The Cysic team immediately suspended the cross-chain bridge and blacklisted related addresses. Preliminary investigations indicate that user assets on the Cysic mainnet remain unaffected, and the minting incident does not equate to a confirmed financial loss. Approximately 2.8 million CYS tokens are still held by the attacker, which have been restricted from transfer. The bridge will only be reopened after a complete security audit is conducted.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-17
Cysic security incident reported
Cysic Foundation announced unauthorized minting of 10 million CYS tokens on BNB Smart Chain.
Kucoin
2026-10-17
Cross-chain bridge suspended
The Cysic team suspended the bridge and implemented on-chain blacklisting of related addresses.
Kucoin

More articles in this cluster (2)

Following this threat?

Track Cysic Foundation in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What was the attack method?
The attacker exploited a vulnerability in the processing logic of the Cysic bridge.
Are user assets affected?
No, user assets on the Cysic mainnet remain unaffected according to the Cysic Foundation.
What actions are being taken?
The Cysic team has suspended the bridge and is conducting a security audit before reopening.