BTC $80,180.31 -1.49%
ETH $2,322.89 -1.83%
BNB $741.21 -2.39%
XRP $1.29 -2.56%
SOL $100.48 -2.21%
TRX $0.3312 -0.22%
DOGE $0.0784 -2.10%
ADA $0.2010 -3.13%
BCH $281.02 -6.21%
LINK $11.57 -1.99%
HYPE $85.24 +4.23%
AAVE $132.50 -2.14%
SUI $0.9239 -1.97%
XLM $0.1698 -1.10%
ZEC $1,264.65 -3.66%
AAPL $348.77 +1.01%
AMZN $251.97 -0.93%
GOOGL $291.83 -10.30%
MSFT $542.45 +2.47%
META $618.83 -0.63%
NVDA $214.50 -2.50%
TSLA $404.50 -1.63%
SNDK $1,371.72 -0.14%
INTC $92.34 -3.67%
SPCX $144.11 -3.68%
MU $957.86 -1.18%
AMD $564.83 -1.29%
BTC $80,180.31 -1.49%
ETH $2,322.89 -1.83%
BNB $741.21 -2.39%
XRP $1.29 -2.56%
SOL $100.48 -2.21%
TRX $0.3312 -0.22%
DOGE $0.0784 -2.10%
ADA $0.2010 -3.13%
BCH $281.02 -6.21%
LINK $11.57 -1.99%
HYPE $85.24 +4.23%
AAVE $132.50 -2.14%
SUI $0.9239 -1.97%
XLM $0.1698 -1.10%
ZEC $1,264.65 -3.66%
AAPL $348.77 +1.01%
AMZN $251.97 -0.93%
GOOGL $291.83 -10.30%
MSFT $542.45 +2.47%
META $618.83 -0.63%
NVDA $214.50 -2.50%
TSLA $404.50 -1.63%
SNDK $1,371.72 -0.14%
INTC $92.34 -3.67%
SPCX $144.11 -3.68%
MU $957.86 -1.18%
AMD $564.83 -1.29%

suspend

All
Article
Flash

first_img Cysic cross-chain bridge suffered unauthorized minting of 10 million CYS, the bridge has been suspended

The decentralized computing network Cysic released an event report on platform X stating that its cross-chain bridge was attacked on Saturday. The attacker exploited a processing vulnerability to unauthorizedly mint 10 million CYS on the BNB Smart Chain, and the cross-chain bridge has now been suspended. Preliminary investigation results indicate that the attacker accessed the database supporting the cross-chain bridge without authorization.The report shows that the minting occurred at 12:31:38 UTC, and Cysic added the receiving address to the token contract blacklist at 13:47:52. At that time, the address still held approximately 2.8 million CYS, and transfers have been restricted. Cysic stated that this incident was limited to the message processing and minting aspects of the cross-chain bridge and did not affect the mainnet or other operational systems, nor did it result in the theft or unauthorized transfer of CYS or other assets already in user wallets.Cysic emphasized that the quantity of minted tokens alone cannot determine the final dollar loss, and related token transfers, exchanges, and actual losses are still under verification. The company has hired a security agency and plans to release a follow-up report after the current investigation phase concludes. CYS is used to coordinate incentives for users, computing power providers, governance participants, and contributors within the Cysic network.

Ledger confirmed that affected user devices have unauthorized hardware implants, and the dealer CryptoBilis has suspended inventory sales

Ledger Support released an update stating that it has confirmed the presence of unauthorized hardware implants in the device of one affected user. They are currently contacting the affected user and continuing to investigate the matter. Ledger is calling on anyone with information to provide leads and has stated that it is cooperating with relevant law enforcement agencies to hold those involved accountable. As a precaution, CryptoBilis has confirmed the suspension of sales of all hardware wallet inventory until the investigation is complete, and Ledger is actively communicating with them regarding follow-up measures.Ledger stated that there are currently no signs that its security infrastructure, systems, or services have been compromised. For users who purchased Ledger devices from this dealer, if the initialization setup has not yet been completed, it is advised not to start the setup; if the setup has been completed, they should consider transferring assets to a new Ledger signing device using new recovery phrases.Ledger emphasizes that security threats are constantly evolving, and the company is continuously improving security measures and advancing more sophisticated tamper-proof solutions. It also reminds users to be vigilant against scams that take advantage of this situation and to obtain the latest information only through official Ledger channels. Ledger will not ask users for their 24-word recovery phrase.
app_icon
ChainCatcher Building the Web3 world with innovations.