Cysic Foundation suspended operations of its cross-chain bridge after an attacker minted 10 million CYS tokens without authorization on the BNB Smart Chain. The incident took place on Oct. 17 at 12:31:38 UTC, according to the project’s timeline.

Preliminary findings indicate the attacker obtained unauthorized access to a database that supports the bridge and then exploited a weakness in its message-processing logic. Fraudulent minting messages were submitted, resulting in the creation of the new tokens.

Immediate Response and Token Restrictions

Cysic responded by halting the bridge and adding the recipient address to the token contract’s blacklist at 13:47:52 UTC the same day. Approximately 2.8 million CYS remained at that address at the time of the restriction, preventing further transfers from it.

The remaining balance represented 28 percent of the unauthorized issuance. Investigators are tracing the other roughly 7.2 million tokens to determine whether they were transferred, swapped or otherwise moved.

The project stated that the event was confined to bridge message processing and minting functions. Cysic’s mainnet and other operational systems were not affected.

Investigation Status and Loss Assessment

Cysic has engaged an external security firm to examine the attack path, the compromised infrastructure and the subsequent movement of the minted tokens. A follow-up report is planned once the current phase of the review is complete.

Officials cautioned that the volume of tokens created does not by itself determine the final financial impact. Token transfers, any completed swaps and actual losses remain under active review. No verified total of proceeds obtained by the attacker has been released.

No date has been announced for the resumption of bridge services.

Role of CYS in the Network

CYS serves as the incentive and coordination token within Cysic’s decentralized computing network. It is used to reward users, compute providers, governance participants and other contributors. The project’s published total supply stands at 1 billion CYS, making the unauthorized mint equivalent to 1 percent of that figure.

According to the project’s tokenomics, holders can stake CYS to receive non-transferable governance credits, while compute providers use the token to reserve capacity for tasks such as zero-knowledge proof generation and artificial-intelligence workloads.

The Foundation continues to monitor the situation and has stated that existing customer wallet balances were not compromised in the incident.