Cysic suspends bridge after attacker mints 10 million CYS and moves about $727,000 to Ethereum
The Cysic bridge was taken offline after an attacker minted new tokens and routed roughly $727,000 in proceeds to Ethereum via multiple cross‑chain services.
Cysic suspended its bridge after an attacker minted 10 million CYS and moved roughly $727,000 in proceeds to the Ethereum network, the company reported on Oct. 18, 2026.
According to the published account, the attacker created 10 million new CYS tokens and then bridged about $727,000 worth of funds to Ethereum. The transfers to Ethereum were routed through Mayan, deBridge and SWFT's Bridgers. Following the token minting and outbound transfers, Cysic suspended its bridge to address the incident.
The key verified facts are:
- An attacker minted 10,000,000 CYS.
- Approximately $727,000 was bridged to Ethereum.
- The funds were moved using Mayan, deBridge and SWFT's Bridgers.
- Cysic suspended its bridge after the activity was detected.
Brief background
Cysic’s suspension targeted its bridging functionality after the mint-and-bridge activity. The action was reported publicly on Oct. 18, 2026 and was taken in direct response to the unauthorized token minting and subsequent transfers to Ethereum.
WHY THIS MATTERS
ANALYSISCross-chain bridges are commonly used to move assets between blockchains, and this incident illustrates how an attacker can combine a token minting exploit with multiple routing services to move proceeds quickly across networks. Suspending the bridge is a containment step that can limit further on‑protocol transfers from that vector, but the use of intermediary services to reach Ethereum shows how stolen funds can traverse multiple platforms. The episode underscores ongoing security and custodial risks around bridges and token issuance processes and highlights why rapid detection and coordination with cross‑chain service providers matter when responding to on‑chain exploits.
This section is analysis based on the reported facts and is not a claim of additional undisclosed events.
HashFirstGlobal News reports are prepared from publicly available source material.