Cysic has suspended its cross-chain bridge indefinitely after an unauthorized mint of 10 million CYS tokens occurred on BNB Smart Chain on October 17, 2026, at 12:31:38 UTC. The company said the incident was limited to bridge message processing and minting, with its mainnet and other operational systems unaffected.
By 13:47:52 UTC the same day, Cysic blacklisted the address that received the tokens. At that time, approximately 2.8 million CYS remained in the frozen wallet, meaning roughly 7.2 million tokens had already been moved elsewhere.
Investigation and Early Findings
Cysic has engaged third-party security experts to investigate the breach and track the movement of the exploited tokens. Early findings suggest a potential link between the incident and unauthorized database access, along with weaknesses in the bridge's processing logic. The company has not yet confirmed the full attack vector or root cause.
Supply Impact
CYS has a maximum supply of 1 billion tokens. Approximately 160.8 million were in circulation following the token generation event in December 2025. The 10 million unauthorized tokens represent a meaningful addition to the circulating supply.
Cysic operates a dual-token model, with CYS serving as the utility token and CGT handling governance through staking. The company reported no impact on CGT from the bridge incident.
Implications for Users
CYS holders face potential supply dilution from the unauthorized minting. Bridge users cannot transfer CYS across chains through Cysic's bridge until it reopens, with no timeline provided for restoration.
The investigation's focus on possible unauthorized database access raises questions about security practices beyond smart contract audits. If confirmed, it would indicate vulnerabilities in the off-chain systems that feed the bridge rather than solely in on-chain code.
