{
  "version": 1,
  "event_id": "evt_84d1f22c2841c444",
  "url": "https://xiyu.news/events/evt_84d1f22c2841c444/",
  "json": "https://xiyu.news/api/events/evt_84d1f22c2841c444.json",
  "type": "security_incident",
  "status": "developing",
  "category": "crypto",
  "title": {
    "zh": "Cysic 加密跨链桥在 1000 万枚 CYS 被未经授权铸造后暂停",
    "en": "Cysic crypto bridge halted after unauthorized mint of 10M CYS"
  },
  "current_state": {
    "zh": "Cysic 跨链桥仍处于暂停状态，涉事地址已被链上黑名单限制，约 280 万枚 CYS 无法转出；项目称主网和用户钱包资产未受影响，并已聘请安全公司调查和追踪资金。",
    "en": "The Cysic cross-chain bridge remains paused, the involved address is blacklisted on-chain with about 2.8 million CYS frozen, and the project says the mainnet and user wallet assets were unaffected while a security firm investigates and traces funds."
  },
  "first_seen_at": "2026-10-18T13:01:38.426289+00:00",
  "last_updated_at": "2026-10-18T13:01:38.426289+00:00",
  "last_material_change_at": "2026-10-18T13:01:38.426289+00:00",
  "confidence": 0.75,
  "updates_count": 2,
  "sources_count": 3,
  "entities": [
    "cys",
    "cysic",
    "unauthorized-mint"
  ],
  "identifiers": [],
  "topics": [
    "bnb-chain",
    "bnb-smart-chain",
    "bridge-exploit",
    "cross-chain-bridge",
    "cysic",
    "unauthorized-mint"
  ],
  "updates": [
    {
      "update_id": "upd_e84e8eec63cbb2d8",
      "event_id": "evt_84d1f22c2841c444",
      "occurred_at": "2026-10-18T10:43:12Z",
      "published_at": "2026-10-18T10:43:12Z",
      "first_seen_at": "2026-10-18T13:01:38.426289Z",
      "time_precision": "published",
      "update_type": "initial",
      "material_change": true,
      "title_zh": "Cysic 加密跨链桥在 1000 万枚 CYS 被未经授权铸造后暂停",
      "title_en": "Cysic crypto bridge halted after unauthorized mint of 10M CYS",
      "what_changed_zh": "Cysic 在攻击者利用处理漏洞在 BNB Smart Chain 上铸造 1000 万枚 CYS 后暂停了其跨链桥，项目方已将接收地址列入黑名单，并限制约 280 万枚剩余代币的转账。",
      "what_changed_en": "Cysic suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain, with the project blacklisting the recipient and restricting transfers of about 2.8 million remaining tokens.",
      "current_state_zh": "Cysic 在攻击者利用处理漏洞在 BNB Smart Chain 上铸造 1000 万枚 CYS 后暂停了其跨链桥，项目方已将接收地址列入黑名单，并限制约 280 万枚剩余代币的转账。",
      "current_state_en": "Cysic suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain, with the project blacklisting the recipient and restricting transfers of about 2.8 million remaining tokens.",
      "detailed_summary_zh": "Cysic suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain, with the project blacklisting the recipient and restricting transfers of about 2.8 million remaining tokens.",
      "detailed_summary_en": "Cysic suspended its cross-chain bridge after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain, with the project blacklisting the recipient and restricting transfers of about 2.8 million remaining tokens.",
      "background_zh": "",
      "background_en": "",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "",
      "market_impact_en": "",
      "importance_score": 7.0,
      "references": [],
      "confidence": 0.75,
      "story_ids": [
        "rss:cointelegraph.com_rss:c9c04f105a0bad79"
      ],
      "sources": [
        {
          "url": "https://cointelegraph.com/news/cysic-crypto-bridge-halted-after-unauthorized-mint-of-10m-cys?utm_source=rss_feed&utm_medium=rss&utm_campaign=rss_partner_inbound",
          "label": "Cointelegraph",
          "source_type": "rss",
          "official": false
        }
      ]
    },
    {
      "update_id": "upd_fcb26fbfedc65513",
      "event_id": "evt_84d1f22c2841c444",
      "occurred_at": "2026-10-18T10:50:55Z",
      "published_at": "2026-10-18T10:50:55Z",
      "first_seen_at": "2026-10-18T13:01:24.957103Z",
      "time_precision": "published",
      "update_type": "response",
      "material_change": true,
      "title_zh": "【Cysic 跨链桥遭到攻击，黑客未经授权铸造了 1000 万枚 CYS】",
      "title_en": "【Cysic 跨链桥遭到攻击，黑客未经授权铸造了 1000 万枚 CYS】",
      "what_changed_zh": "Cysic 补充称攻击发生于 10 月 17 日，黑客获取跨链服务相关数据库访问权限并提交虚假铸造消息；本次事件仅影响跨链桥消息处理与铸造功能，未影响 Cysic 主网或用户钱包现有资产，团队已聘请安全公司调查攻击路径并追踪资金。",
      "what_changed_en": "Cysic added that the attack occurred on October 17 after the attacker gained access to a database related to the cross-chain service and submitted false mint messages; the incident was limited to the bridge's message-processing and minting functions, did not affect the Cysic mainnet or existing assets in user wallets, and the team hired a security firm to investigate the attack path and trace funds.",
      "current_state_zh": "Cysic 跨链桥仍处于暂停状态，涉事地址已被链上黑名单限制，约 280 万枚 CYS 无法转出；项目称主网和用户钱包资产未受影响，并已聘请安全公司调查和追踪资金。",
      "current_state_en": "The Cysic cross-chain bridge remains paused, the involved address is blacklisted on-chain with about 2.8 million CYS frozen, and the project says the mainnet and user wallet assets were unaffected while a security firm investigates and traces funds.",
      "detailed_summary_zh": "Cysic's cross-chain bridge was exploited on October 17, allowing an attacker to mint 10 million CYS without authorization on BNB Chain via a logic flaw and database access, prompting the team to pause the bridge and blacklist involved addresses.",
      "detailed_summary_en": "Cysic's cross-chain bridge was exploited on October 17, allowing an attacker to mint 10 million CYS without authorization on BNB Chain via a logic flaw and database access, prompting the team to pause the bridge and blacklist involved addresses.",
      "background_zh": "Cysic 自称是一个全栈算力网络（ComputeFi），根据其代币经济文档，CYS 代币用于协调用户、算力提供方、治理参与者与贡献者之间的激励。跨链桥长期以来是去中心化金融中最主要的攻击面之一，漏洞通常出现在消息验证、验证者信任机制，或运营密钥与数据库访问权限等环节。",
      "background_en": "Cysic describes itself as a full-stack compute network (ComputeFi), and its CYS token, per the project's tokenomics documentation, coordinates incentives among users, compute providers, governance participants and contributors. Cross-chain bridges have repeatedly been a leading attack vector in decentralized finance, with flaws typically arising in message verification, validator trust or operational key and database access.",
      "community_discussion_zh": "",
      "community_discussion_en": "",
      "market_impact_zh": "风险敞口集中在 BNB Smart Chain 上的 CYS 流动性：跨链桥已暂停，切断了 CYS 在网络间流转的跨链通道；同时约 280 万枚未经授权铸造的代币滞留在被拉黑地址中无法转移。若该笔铸造中仍有未被拉黑的部分，则构成新增供应对代币形成潜在抛压，最终损失规模取决于基金会正在进行的资金追踪核查结果。",
      "market_impact_en": "The exposure is concentrated in CYS liquidity on BNB Smart Chain: the bridge has been paused, cutting the cross-chain channel that moves CYS between networks, while roughly 2.8 million of the unauthorized tokens sit in a blacklisted address that cannot transfer them. Any remaining unblacklisted portion of the mint would represent newly created supply overhanging the token, and the eventual loss figure depends on the foundation's ongoing fund-tracing review.",
      "importance_score": 7.0,
      "references": [
        {
          "url": "https://cysic.xyz/",
          "title": "Cysic is leading the future of ComputeFi"
        },
        {
          "url": "https://chain.link/article/cross-chain-bridge-hacks",
          "title": "Understanding Cross-Chain Bridge Hacks | Chainlink"
        }
      ],
      "confidence": 0.96,
      "story_ids": [
        "telegram:foresightnews:120675",
        "telegram:theblockbeats:201086"
      ],
      "sources": [
        {
          "url": "https://foresightnews.pro/news/h5Detail/115419",
          "label": "foresightnews",
          "source_type": "telegram",
          "official": false
        },
        {
          "url": "https://m.theblockbeats.info/flash/372425?from=telegram",
          "label": "theblockbeats",
          "source_type": "telegram",
          "official": false
        }
      ]
    }
  ]
}
