News linked to both this project and an event.
The Cysic Foundation released an incident report stating that on October 17, its cross-chain bridge experienced a security incident in which an attacker minted 10 million CYS without authorization on the BNB Smart Chain. Upon discovering the anomaly, the project team suspended the cross-chain bridge, placed related addresses on an on-chain blacklist, and hired a professional security firm to investigate the attack vectors and fund flows.
The XRP Ledger recently patched a critical security vulnerability traceable to 2015. Discovered by researcher Cayden Liao and Veria AI, the issue was reported internally on September 22. Attackers could exploit a counter overflow flaw in the ledger’s built-in exchange to create massive amounts of XRP from thin air at an extremely low cost by opening hundreds of accounts, then transfer and liquidate them to bypass XRP’s fixed supply cap of 100 billion. RippleX quietly released the patched version xrpld 3.4.1 on September 25, stating that there is currently no evidence of the public network having been exploited.
SlowMist has disclosed that the Liquid Network was attacked on September 6 via a Rangeproof verification cache key collision vulnerability. The attacker minted approximately 3,998.5 L-BTC without collateral — with no corresponding BTC peg-in — and then within minutes converted them to BTC on the Bitcoin mainnet via peg-out. After the incident, approximately 3,400 BTC was returned to the Liquid Federation peg wallet, but approximately 598.5 BTC remains under the attacker's control.SlowMist noted that the root cause of the vulnerability lies in the fact that the Rangeproof verification cache key in Elements did not include length prefixes when concatenating multiple variable-length fields, allowing different parameter combinations to potentially generate the same cache key. The attacker triggered a cache collision by constructing transactions, causing nodes to hit a "verification passed" cached result, thereby bypassing secp256k1_rangeproof_verify and the minimum amount check, ultimately accepting outputs not backed by real assets and completing the L-BTC minting. SlowMist stated that it has traced the fund flows on the Bitcoin side and completed its analysis of the incident.