Skip to main content
AVOID.NET
← Cysic1 decision on this page

Audit log

Every state-changing event for Cysic: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

  1. #1publishby system:backfill
    2026-11-04 12:29:00Z
    Score: ? → ? (no score change)
    anchoranchored
    chain
    ●mainnet-betaslot 465,302,215
    sig
    36HKdmoDtwos…kDYHwyuMexplorer ↗
    hash
    HYkZKWU1Uxgu…dgCxP9HRsha256 → base58
    verifying row…full verify ↗
    canonical bytes (9104 B) ▸
    {"actor":"system:backfill","investigation_id":"f99d6ca0-aa76-4794-9eeb-98749022e22a","kind":"publish","page_slug":"cysic","published_at":"2026-11-04T12:28:59.920Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Cysic","sections":[{"content":"On October 17, 2026, an attacker minted 10 million unauthorized CYS tokens on BNB Smart Chain by exploiting Cysic's cross-chain bridge. The Cysic Foundation stated that the attacker 'gained unauthorized access to a database used by services supporting the bridge' and separately exploited a flaw in the bridge's message-processing logic to submit a fraudulent mint message. According to The Block's reconstruction of the on-chain transactions, the attacker sold approximately 5.65 million CYS for 588,315 USDT within minutes of the mint, routed funds through a SWFT BridgersSwap contract and Mayan Finance to acquire ETH on Ethereum, and sold a further 1.55 million CYS for roughly 220 BNB, which was likewise bridged to Ethereum via Mayan and deBridge. In total, about 7.2 million CYS were sold across 26 transfers in 15 transactions, with twelve transactions routed through OKX's DEX aggregator, netting the attacker roughly 306.6 ETH (about $727,000 at the time). Cysic blacklisted the receiving address in the CYS token contract 76 minutes after the initial mint, freezing approximately 2.8 million of the unauthorized tokens; the blacklist applies only to CYS on BNB Chain and does not affect the ETH already obtained. Cysic stated that the incident was confined to the bridge's message-processing and minting functions, that its mainnet was unaffected, and that 'existing user assets were not stolen.' The bridge remained suspended pending a security review by an unnamed third-party firm, and Cysic said the 10-million-token mint figure does not by itself represent the final U.S.-dollar loss.","heading":"October 2026 Bridge Exploit","severity":"high","sources":[{"credibility":2,"name":"Cysic suspends bridge after attacker mints tokens and moves $727,000 to Ethereum","type":"news_article","url":"https://theblock.co/news/defi/2026-10-18-cysic-suspends-bridge-after-attacker-mints-tokens-and-moves-727000-to-ethereum-418863"},{"credibility":2,"name":"Cysic Bridge Exploit Leads to Unauthorized Minting of 10M CYS Tokens","type":"news_article","url":"https://coinmarketcap.com/academy/article/cysic-bridge-exploit-10-million-cys-unauthorized-minting"},{"credibility":2,"name":"Cysic halts crypto bridge after unauthorized mint of 10M CYS","type":"news_article","url":"https://cryptobriefing.com/cysic-halts-bridge-unauthorized-cys-mint/"},{"credibility":2,"name":"Cointelegraph: Cysic crypto bridge halted after unauthorized mint of 10M CYS","type":"news_article","url":"https://cointelegraph.com/news/cysic-crypto-bridge-halted-after-unauthorized-mint-of-10m-cys"}]},{"content":"Following the exploit, Cysic announced plans to burn 7.2 million CYS from its foundation reserves by the end of October 2026 to offset the amount sold by the attacker and to restore alignment with its original tokenomics model. The unauthorized mint represented roughly 1% of circulating supply at the time, and reporting described circulating supply rising by approximately 6.22% as a result of the mint before remediation. No source reviewed describes a compensation or reimbursement plan for users or liquidity providers affected by the incident, and Cysic had not published a promised follow-up report detailing verified losses or fund-tracing progress as of the most recent sources reviewed.","heading":"Remediation and Token Supply Impact","severity":"medium","sources":[{"credibility":2,"name":"Cysic plans to burn 7.2 million CYS by end of October after cross-chain bridge security incident","type":"news_article","url":"https://phemex.com/news/article/cysic-plans-to-burn-72-million-cys-by-end-of-october-after-crosschain-bridge-security-incident-100799"},{"credibility":2,"name":"Cysic stoppt die Bridge: 10 Millionen CYS ohne Deckung, 6,22 Prozent mehr Umlauf","type":"news_article","url":"https://cryptoticker.io/de/cysic-bridge-unautorisierter-mint/"}]},{"content":"Cysic is a zero-knowledge proof hardware-acceleration project, founded in 2022, that operates a Layer 1 network and a zkVM called Venus for verifiable computation, alongside a proprietary ASIC chip (C1) intended to accelerate ZK-proof generation. The project raised a $6 million seed round led by Polychain Capital in 2023. Prior to the October 2026 bridge incident, no major prior security incidents or regulatory actions involving Cysic were identified in available reporting.","heading":"Background","severity":"low","sources":[{"credibility":2,"name":"Cysic suspends bridge after attacker mints tokens and moves $727,000 to Ethereum (background section)","type":"news_article","url":"https://theblock.co/news/defi/2026-10-18-cysic-suspends-bridge-after-attacker-mints-tokens-and-moves-727000-to-ethereum-418863"}]}],"sources_used":[{"credibility":2,"name":"Cysic suspends bridge after attacker mints tokens and moves $727,000 to Ethereum","type":"news_article","url":"https://theblock.co/news/defi/2026-10-18-cysic-suspends-bridge-after-attacker-mints-tokens-and-moves-727000-to-ethereum-418863"},{"credibility":2,"name":"Cysic Bridge Exploit Leads to Unauthorized Minting of 10M CYS Tokens","type":"news_article","url":"https://coinmarketcap.com/academy/article/cysic-bridge-exploit-10-million-cys-unauthorized-minting"},{"credibility":2,"name":"Cysic halts crypto bridge after unauthorized mint of 10M CYS","type":"news_article","url":"https://cryptobriefing.com/cysic-halts-bridge-unauthorized-cys-mint/"},{"credibility":2,"name":"Cointelegraph: Cysic crypto bridge halted after unauthorized mint of 10M CYS","type":"news_article","url":"https://cointelegraph.com/news/cysic-crypto-bridge-halted-after-unauthorized-mint-of-10m-cys"},{"credibility":2,"name":"Cysic plans to burn 7.2 million CYS by end of October after cross-chain bridge security incident","type":"news_article","url":"https://phemex.com/news/article/cysic-plans-to-burn-72-million-cys-by-end-of-october-after-crosschain-bridge-security-incident-100799"},{"credibility":2,"name":"Cysic stoppt die Bridge: 10 Millionen CYS ohne Deckung, 6,22 Prozent mehr Umlauf","type":"news_article","url":"https://cryptoticker.io/de/cysic-bridge-unautorisierter-mint/"}],"summary":"Cysic is a zero-knowledge proof hardware-acceleration project and Layer 1 network, founded in 2022 and backed by a $6 million seed round led by Polychain Capital. On October 17, 2026, Cysic's cross-chain bridge connecting its native chain to BNB Smart Chain and Base was exploited: an attacker gained unauthorized access to a database supporting the bridge and exploited a flaw in its message-processing logic to mint 10 million unauthorized CYS tokens, of which roughly 7.2 million were sold for about $727,000 in ETH before the receiving address was blacklisted 76 minutes later.","timeline":[{"date":"2022","event":"Cysic is founded as a zero-knowledge proof hardware-acceleration project.","source":"The Block","source_url":"https://theblock.co/news/defi/2026-10-18-cysic-suspends-bridge-after-attacker-mints-tokens-and-moves-727000-to-ethereum-418863"},{"date":"2023","event":"Cysic raises a $6 million seed round led by Polychain Capital.","source":"The Block","source_url":"https://theblock.co/news/defi/2026-10-18-cysic-suspends-bridge-after-attacker-mints-tokens-and-moves-727000-to-ethereum-418863"},{"date":"2026-10","date_evidence":"8:31 a.m.: The attacker minted 10 million unauthorized CYS on BNB Chain.","date_original":"2026-10-17","event":"Attacker exploits Cysic's bridge message-processing logic to mint 10 million unauthorized CYS tokens on BNB Smart Chain.","source":"The Block","source_url":"https://theblock.co/news/defi/2026-10-18-cysic-suspends-bridge-after-attacker-mints-tokens-and-moves-727000-to-ethereum-418863"},{"date":"2026-10","date_evidence":"9:47 a.m.: Cysic blacklisted the address in the CYS token contract, 76 minutes after the exploit","date_original":"2026-10-17","event":"Cysic blacklists the attacker's receiving address on the CYS token contract, freezing about 2.8 million CYS, 76 minutes after the initial mint.","source":"The Block","source_url":"https://theblock.co/news/defi/2026-10-18-cysic-suspends-bridge-after-attacker-mints-tokens-and-moves-727000-to-ethereum-418863"},{"date":"2026-10","date_original":"2026-10-18","event":"Cysic publicly confirms the bridge suspension and provides preliminary findings citing unauthorized database access and a message-processing flaw.","source":"The Block","source_url":"https://theblock.co/news/defi/2026-10-18-cysic-suspends-bridge-after-attacker-mints-tokens-and-moves-727000-to-ethereum-418863"},{"date":"2026-10","event":"Cysic announces plans to burn 7.2 million CYS from foundation reserves by the end of October 2026 to offset the unauthorized mint.","source":"Phemex","source_url":"https://phemex.com/news/article/cysic-plans-to-burn-72-million-cys-by-end-of-october-after-crosschain-bridge-security-incident-100799"}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision b7430458-e5a0-469b-add8-391e4d191dc8
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.