Cysic

Tornado

Tornado Cash

Cash

The wallet linked to the Cysic bridge exploit sent about $744,000 in cryptocurrencies to Tornado Cash on Friday after the Cysic Foundation offered the attacker a 10% recovery bounty.
The address transferred 300 Ether (ETH) and 30.4 BNB to the crypto mixer, according to blockchain security company <a href="https://x.com/PeckShieldAlert/status/2113532584588402877" rel="noopener noreferrer nofollow">PeckShield</a>.
<a href="https://ct.com/news/cysic-crypto-bridge-halted-after-unauthorized-mint-of-10m-cys" rel="noopener noreferrer nofollow">The hacker exploited</a> a bridge vulnerability to mint 10 million Cysic (CYS) tokens on BNB Smart Chain on Saturday. Cysic suspended the bridge and blacklisted the recipient address, freezing about 2.8 million of the newly minted tokens. The foundation said its mainnet and existing assets in user wallets were unaffected.
The following Thursday, the Cysic Foundation <a href="https://x.com/cysic_fdn/status/2113205270684082197" rel="noopener noreferrer nofollow">offered</a> the hacker a 10% bounty in exchange for returning 275.872 ETH, worth about $665,000, representing roughly 90% of the identified Ether proceeds.
Tornado Cash pools deposits from multiple addresses, making the funds harder to trace. The attacker’s Ethereum wallet held just $45 in ETH at press time, according to Akham <a href="https://arkm.com/explorer/address/0x1106De394da07e90b02161465EA0421B74DB4691" rel="noopener noreferrer nofollow">data</a>.
Cointelegraph contacted the Cysic Foundation for comment on fund recovery efforts but did not receive a response by publication.
Related: <a href="https://ct.com/news/cloudflare-millions-exploit-attempts-php-vulnerability-disclosure" rel="noopener noreferrer nofollow">PHP flaw draws millions of exploit attempts, Cloudflare CEO warns</a>

Cysic dangles a 10% bounty, hacker pours loot into Tornado Cash

Cointelegraph

Other articles published on Oct 23, 2026

Join our free newsletter for daily crypto updates!