# Cysic keeps bridge closed after reporting unauthorized 10 million CYS mint

Canonical: https://chainincident.com/news/ec27e5dd-d922-4588-acad-a706911c71b8
Published: 2026-10-18T16:03:06.297Z
Publisher: Chain Incident

Cysic Foundation disclosed an October 17 unauthorized mint on BNB Smart Chain and says its cross-chain bridge remains unavailable while the cause and token movements are investigated.

Cysic Foundation said on October 18 that its cross-chain bridge remains closed after an unauthorized mint of 10 million CYS on BNB Smart Chain the previous day. Its [incident report](https://x.com/cysic_fdn/status/2111761749116637687) says cross-chain services through that bridge are unavailable while the team reviews its operation.

The foundation dated the mint to October 17 at 12:31:38 UTC. It said preliminary findings point to unauthorized access to a database used by services supporting the bridge, followed by a fraudulent mint message submitted through a flaw in processing logic. The full attack path and root cause remain under investigation. That account is a preliminary explanation from the project, rather than a completed technical finding.

Cysic said its response included adding the recipient address to the CYS token contract's blacklist on BNB Smart Chain at 13:47:52 UTC on October 17. Cysic reported that transfers of approximately 2.8 million CYS remaining at that address were restricted. That figure describes the balance covered by the reported restriction, rather than tokens the foundation says it has recovered.

[Cointelegraph's October 18 report](https://cointelegraph.com/news/cysic-crypto-bridge-halted-after-unauthorized-mint-of-10m-cys) also describes the bridge suspension and the mint-and-blacklist timeline. Both the unauthorized issuance and the response concern the cross-chain bridge; the notice does not announce a halt to the entire Cysic network.

Cysic said it engaged a security firm to investigate the attack path, addresses and token movements. It is reviewing message processing, permissions and related asset records, with a follow-up report planned after the current investigation phase.

The foundation has not provided a reopening date. It says the bridge will reopen only after its security review is complete, with arrangements announced through official channels. The notice also leaves the incident's final financial impact under review. The unauthorized token count is not a verified dollar-loss estimate.

## Sources

- [Cysic Incident Report](https://x.com/cysic_fdn/status/2111761749116637687) — Cysic Foundation
- [Cysic crypto bridge halted after unauthorized mint of 10M CYS](https://cointelegraph.com/news/cysic-crypto-bridge-halted-after-unauthorized-mint-of-10m-cys) — Cointelegraph

- [Editorial policy](https://chainincident.com/editorial-policy)
- [Request a correction](https://chainincident.com/corrections)