Cysic Halts Bridge After Unauthorized Minting of 10 Million CYS
A message processing flaw allowed for the improper creation of tokens on the BNB Smart Chain network.
Security Editor: Fabricio Marcilio 1 min read
The Cysic platform suspended its cross-chain bridge after identifying the unauthorized minting of 10 million CYS tokens. The incident occurred on Saturday through the exploitation of a flaw in the infrastructure's message processing.
Preliminary investigations show that the attacker gained improper access to a database supporting the bridge. The project team added the attacker's address to a smart contract blacklist just over an hour after the minting. About 2.8 million tokens remain trapped at that address with transfers restricted.
The company stated that the issue was restricted to the bridge processing and the minting of assets. The mainnet and other operational systems remain secure and without direct impacts. There were no reports of theft or unauthorized transfers of assets held in user wallets.
Cysic has hired a security firm to conduct a detailed analysis of the event. The final financial impact is still under review because the quantity of tokens minted does not necessarily reflect the actual loss in dollars. A full report will be published after the conclusion of the current investigation phase.
Flaws in digital asset bridges raise systemic risk for investors by exposing vulnerabilities in cross-chain interoperability. Such events can increase the volatility of specific assets and pressure market confidence in decentralized finance protocols.
Spotted an error? Write to suporte@criptoico.com.br.
More in Security
-
BTCPay Server Patches API Key Vulnerability
Update restricts excessive permissions though the official release is pending
Security
-
Electrum Wallet Flaw Allows Bitcoin Theft During Transactions
Malicious servers tricked users trying to boost pending payments with higher fees
Security
-
CoinDCX Confirms $16 Million Loss Following Security Breach
The exchange states the loss was absorbed internally and client balances remain untouched.
Security