Cysic | Crypto

The attacker moved $744,000 in ETH and BNB to Tornado Cash after exploiting Cysic’s bridge to mint 10 million tokens on BNB Smart Chain. The wallet linked to the Cysic bridge exploit sent about $744,000 in cryptocurrencies to Tornado Cash on Friday after the Cysic Foundation offered the attacker a 10% recovery bounty. The address transferred 300 Ether (ETH) and 30.4 BNB to the crypto mixer, according to blockchain security company PeckShield. The hacker exploited a bridge vulnerability to mint 10 million Cysic (CYS) tokens on BNB Smart Chain on Saturday. Cysic suspended the bridge and blacklisted the recipient address, freezing about 2.8 million of the newly minted tokens. The foundation said its mainnet and existing assets in user wallets were unaffected. Read more

Cysic said the incident was limited to bridge message processing and minting and did not affect the mainnet or other operational systems. Cysic is investigating an unauthorized issuance on BNB Smart Chain and said the mint size alone does not establish the incident’s dollar impact. The company said in a Sunday X incident report that its cross-chain bridge was suspended after an attacker exploited a processing flaw to mint 10 million CYS on BNB Smart Chain on Saturday, with preliminary findings pointing to unauthorized access to a database supporting the bridge. The mint occurred at 12:31:38 UTC, and Cysic added the recipient address to the token contract’s blacklist at 13:47:52 UTC. About 2.8 million CYS remained at that address, with transfers restricted. Read more