Cysic is currently looking into an unauthorized token creation on the BNB Smart Chain, noting that the total amount minted by itself does not determine the financial damage of the event.
In a Sunday X incident report, the organization explained that its cross-chain bridge was paused after a malicious actor took advantage of a validation vulnerability to create 10 million CYS tokens on the BNB Smart Chain on Saturday, with early discoveries indicating that a database backing the bridge was illicitly accessed.
The unauthorized creation took place at 12:31:38 UTC, and Cysic placed the target address onto the token contract blacklist at 13:47:52 UTC. Roughly 2.8 million CYS stayed within that wallet, while all further movements were blocked.
Based on the project’s tokenomics documentation, CYS manages rewards for network participants, computing resources, governance voters, and contributors within the Cysic ecosystem.
Cysic stated that the breach was strictly confined to bridge message handling and token creation, leaving the mainnet and other functional components completely secure. The company mentioned, “The incident did not result in the theft or unauthorized transfer of existing CYS or other assets held in user wallets.”
The company emphasized that the volume of tokens generated does not dictate the ultimate monetary loss, while token swaps, transfers, and actual losses are still being evaluated. Cysic has retained a cybersecurity agency and intends to release an updated statement once the initial inquiry concludes.
Magazine: France is world’s most dangerous place for Bitcoiners: 90 attacks in 7 months
Cointelegraph is committed to independent, transparent journalism. This news article is produced in accordance with Cointelegraph’s Editorial Policy and aims to provide accurate and timely information. Readers are encouraged to verify information independently.
Originally published at https://cointelegraph.com/news/cysic-crypto-bridge-halted-after-unauthorized-mint-of-10m-cys?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound.
