Cysic oplyser, at der først blev skaffet adgang til bridgens database
Cysic's foreløbige rapport siger, at angriberen fik adgang til en database, som bruges af tjenester, der understøtter bridgen. Angriberen udnyttede derefter en fejl i bridgens meddelelsesbehandlingslogik til at indsende en falsk instruktion og skabe 10 millioner CYS på BNB Chain.
This sequence is the project’s current explanation, not a final independent audit. Cysic says the incident affected bridge processing and token creation rather than the mainnet itself. The outside security review still needs to confirm the full path of the attack.
The attacker moved 7.2 million CYS before the freeze
Onchain records reviewed by The Block show that 7.2 million of the new tokens left the receiving address through sales or transfers. Cysic blacklisted the address 76 minutes after the unauthorised creation, leaving about 2.8 million CYS frozen and unable to move.
The 10 million figure is the number of tokens created, not the confirmed dollar loss. The 7.2 million figure describes tokens that moved before the freeze. Neither number alone proves how much value the attacker finally kept.
En del af udbyttet nåede Ethereum
Angriberen vekslede nogle af tokens og flyttede omkring 306.6 ETH til Ethereum via Mayan, deBridge og SWFT's Bridgers-tjeneste. Den ETH var cirka $727,000 værd, da overførslerne blev rapporteret. Det er en afmålt flytning af udbyttet, endnu ikke en endelig tabsberegning for hele hændelsen.
Cysic says existing CYS and other assets already held in user wallets were not stolen. That statement also comes from the project’s preliminary report and should remain separate from the independent investigation now under way.
Bekræftede tiltag i responsen
- The cross-chain bridge was suspended.
- About 2.8 million unsold CYS were blacklisted and frozen.
- An external security firm was brought into the investigation.
- Cysic reported that its mainnet and existing user-wallet assets remained unaffected.
Bridgen forbliver sat på pause under gennemgangen
Cysic suspended the bridge, froze the remaining 2.8 million tokens and hired an outside security company. The next report needs to explain how the database was reached, why the false message was accepted and whether further controls have been added before the bridge returns.
Until that work is complete, the confirmed sequence is limited: bridge access was compromised, 10 million CYS were created, 7.2 million moved before the freeze and part of the proceeds reached Ethereum. The final financial loss is still under investigation.
Denne artikel er kun til information og er ikke investeringsrådgivning.
admin_wcBidragyder · World-CryptMere fra
