On October 17, a flaw in Cysic’s bridge message processing was used to mint 10 million CYS on BNB Smart Chain. Cysic says it suspended the bridge, blacklisted the recipient, and that user assets and its mainnet were unaffected; it attributed the incident preliminarily to unauthorized access to a bridge-support database. The root cause remained under investigation in its incident report.

On October 17, a flaw in Cysic’s bridge message processing was used to mint 10 million CYS on BNB Smart Chain. Cysic says it suspended the bridge, blacklisted the recipient, and that user assets and its mainnet were unaffected; it attributed the incident preliminarily to unauthorized access to a bridge-support database. The root cause remained under investigation in its incident report.

PeckShield reported on October 23 that an address it labels as the exploiter deposited 300 ETH, valued at about $721,140, and 30.4 BNB, about $22,590, into Tornado Cash (PeckShield). TxnXray named 0x1106…B74DB4691 as the Ethereum wallet, and said it made three 100 ETH Tornado Cash deposits between 06:27 and 06:29 UTC, then swapped 9.5 ETH for 22,647 USDT and sent it cross-chain through Mayan Swift (TxnXray). These deposit details are that analyst’s report; the wallet’s transfer records available here do not show those transactions.

Cysic offered a 10% recovery bounty for the return of 275.872 ETH within 72 hours of publishing its on-chain message on October 22, and said it would refer the case to law enforcement if the deadline passed (Cysic Foundation). The sources here do not establish whether the ETH was recovered or identify on-chain evidence for the reported 30.4 BNB deposits.