DeFi Safety · Fact checked

Cysic suspends bridge after attacker mints tokens and moves $727,000 to Ethereum

The attacker, after minting 10 million CYS, managed to bridge about $727,000 in proceeds to Ethereum through Mayan, deBridge and SWFT's Bridgers.

By DeFi Tools Guide Editorial Team · Published Oct 18, 2026, 11:10 AM UTC · Updated 2026-10-20 · Risk level: medium

Sources checked: Oct 20, 2026, 12:02 PM UTC

This article may contain affiliate links. Commercial relationships are disclosed in the affiliate policy.

DeFi Safety — illustration keyed to this article's identifier. Source documents are listed under Sources and are not reproduced here.

What happened

The attacker, after minting 10 million CYS, managed to bridge about $727,000 in proceeds to Ethereum through Mayan, deBridge and SWFT’s Bridgers.

Reported details

Cysic Bridge Exploit Mints 10M CYS on BNB Chain; Attacker Nets $727,000 in ETH BigGo Finance
Cysic Cross-Chain Bridge Hack Leads to Unauthorized Minting of 10 Million CYS, $727,000 Drained bloomingbit
Cysic Bridge Hack: Attacker Mints 10M CYS, Moves $727K to Ethereum The Crypto Times
Cysic Halts Bridge After Unauthorized Mint of 10 Million CYS Bitcoin Foundation
Yuga Labs Opens Mudwater Card Claims on Solana, With 10 Million CYS Bridge Exploit as Backdrop BigGo Finance
Cysic halts bridge after hacker creates 10 million CYS Crypto News
About 2.8 million CYS remain frozen at the recipient address, while onchain records show some tokens were sold before the blacklist took effect.

Why this matters

This reads as a change in infrastructure rather than a move in price, and that distinction decides what is worth verifying: whether the underlying record moved, or only the interface around it. If a ledger, custodian or settlement term is unchanged, then anything built on top of it behaves the same too, however the announcement is framed. Subject of the report: Cysic suspends bridge.

Evidence boundary

On Cysic suspends bridge, the scope is limited to what the linked 2 reports state, and where they diverge both positions are recorded without either being picked in advance; the headline figure is what to check first.

What to verify

If Cysic suspends bridge points at a contract or a chain, verify the deployed address and version there. If it describes an internal or corporate change with no on-chain component, the chain is the wrong place to look.

Sources and editorial check time

The Block RSS: https://www.theblock.co/news/defi/2026-10-18-cysic-suspends-bridge-after-attacker-mints-tokens-and-moves-727000-to-ethereum-418863
The Defiant Live: https://thedefiant.io/news/hacks/cysic-halts-bridge-after-unauthorized-mint-of-10-million-cys
Editorial source check time: 2026-10-20T12:02:33.378Z

This information is educational and is not financial, legal, or tax advice.