A hacker exploited a vulnerability in the Cysic bridge to mint 10 million Cysic (CYS) tokens on the BNB Smart Chain. The attack occurred on Saturday, prompting Cysic to suspend the bridge and blacklist the recipient address, freezing about 2.8 million of the newly minted tokens. The hacker then moved $744,000 in ETH and BNB to Tornado Cash on Friday, despite the Cysic Foundation offering a 10% recovery bounty.
The wallet linked to the exploit transferred 300 ETH and 30.4 BNB to the crypto mixer, according to blockchain security firm PeckShield. The bounty offered by the Cysic Foundation was for the return of 275.872 ETH, worth approximately $665,000, representing roughly 90% of the identified Ether proceeds. At press time, the attacker’s Ethereum wallet held just $45 in ETH, per Akham data.
The Cysic Foundation stated that its mainnet and existing assets in user wallets were unaffected by the exploit. Cointelegraph reached out to the Cysic Foundation for comment on fund recovery efforts but did not receive a response by publication.