Cysic Exploit Leads to $744,000 Laundered via Tornado Cash
Written with artificial intelligence.
After exploiting a vulnerability in Cysic’s bridge, an attacker transferred $744,000 in ETH and BNB to Tornado Cash. The Cysic Foundation has offered a 10% bounty to recover a portion of the stolen funds.
Exploit Overview
An attacker exploited a vulnerability in the Cysic bridge, leading to the minting of 10 million Cysic (CYS) tokens on the BNB Smart Chain. In response to the exploit, Cysic suspended the bridge and blacklisted the address involved, which resulted in approximately 2.8 million of the newly minted tokens being frozen.
Funds Laundered
On Friday, the hacker moved around $744,000 in cryptocurrencies, including 300 Ether (ETH) and 30.4 BNB, to Tornado Cash, a mixer that obfuscates the source of funds. This transaction was reported by blockchain security firm PeckShield.
Recovery Efforts
In an effort to reclaim the stolen assets, the Cysic Foundation has offered the hacker a 10% bounty for the return of 275.872 ETH, valued at about $665,000. This amount accounts for roughly 90% of the identified Ether proceeds from the exploit. At the time of reporting, the hacker's Ethereum wallet contained only about $45 in ETH.
Cointelegraph reached out to the Cysic Foundation for more details on their recovery efforts but did not receive a response before publication.