Cysic Suspends Bridge After Unauthorized 10M CYS Mint

Cysic suspended its cross-chain bridge after an unauthorized actor minted 10 million CYS on BNB Smart Chain on October 17, 2026. The project’s preliminary incident report says the mainnet and existing assets in user wallets were not affected, while the bridge remains closed for a security review. The incident is important because it shows how a failure in offchain support infrastructure can authorize new token supply without directly breaching a blockchain’s main consensus system. Follow related developments through OrangeX.com Security.

What Cysic says happened

The unauthorized mint was recorded at 12:31:38 UTC. Cysic’s preliminary findings point to unauthorized access to a database used by services supporting the bridge. The attacker then exploited a weakness in the bridge’s message-processing logic to submit a fraudulent mint instruction on BNB Smart Chain.

At 13:47:52 UTC, roughly 76 minutes after the mint, the project added the receiving address to the CYS token contract’s blacklist. About 2.8 million CYS remained in that address and became restricted. Cysic suspended the bridge and engaged an external security firm to investigate the attack path, affected addresses and movement of funds.

What is confirmed and what remains open

Cysic said the incident was confined to bridge message processing and minting. Its initial assessment found no impact on the Cysic mainnet, other operational systems or existing CYS and other assets held in user wallets. Those statements remain preliminary until the technical review is complete.

The project has not published a verified final loss. Ten million newly minted tokens cannot be treated as a dollar-loss figure because not every token necessarily changed hands at the same price or was converted into another asset. The status of tokens outside the blacklisted address, completed swaps, possible recoveries and any liability to affected market participants still require confirmation.

Market access and risk context

CYS remains available through verified OrangeX.com markets, including CYS spot trading and CYS perpetual trading. Availability does not reduce incident risk. Traders should distinguish the project’s mainnet from its bridge, monitor official reopening and forensic updates, and account for liquidity, price volatility and contract risk.

OrangeX.com Analysis

The confirmed result is a contained but unresolved bridge-security incident: unauthorized infrastructure access led to a fraudulent mint, the bridge was paused and a portion of the minted balance was frozen. The absence of reported theft from existing wallets is material, but it does not establish the final economic cost. The strongest evidence of recovery will be a detailed post-mortem, independently verifiable remediation, an accounting of token flows and clear conditions for any bridge restart.