Cysic halts crypto bridge after unauthorized mint of 10M CYS

Cysic has suspended its cross-chain bridge after someone minted 10 million CYS tokens on BNB Smart Chain without authorization on October 17, 2026. Cysic described the incident as limited to bridge message processing and minting. It said the mainnet and its other operational systems were unaffected. The bridge, however, is offline indefinitely, and no timeline has been given for its return. What happened on the bridge The unauthorized mint took place at 12:31:38 UTC on October 17. By 13:47:52 UTC the same day, Cysic had blacklisted the address that received the tokens. At the time of the blacklisting, approximately 2.8 million of the minted CYS sat in that address. That means most of the 10 million tokens were no longer in the frozen wallet when the freeze landed. Cysic has brought in third-party security experts to investigate. They are also tracking where the exploited tokens go and whether they get swapped. Early findings point to a potential link between the breach and unauthorized database access, along with weaknesses in the bridge’s processing logic. Cysic has not confirmed the full attack vector or the root cause. Both are still under evaluation. Why bridge minting is the w...