2/6
The attacker accessed the bridge database through an inadequately protected business service. Shared credentials an | Hanami
2/6
The attacker accessed the bridge database through an inadequately protected business service. Shared credentials and broad permissions enabled database manipulation. Inadequate off-chain validation then allowed forged records to trigger unauthorized minting.
Reply to @cysic_xyz: 1/6 Cysic Bridge Incident Post-Mortem
On October 17, 2026, an attacker minted 10,000,002 CYS on BNB Smart Chain: a 10M mint and two 1 CYS tests. We paused the bridge and froze 2.8M CYS after 7.2M from the main mint had been sold.