Cysic exploited for 10M CYS tokens via unauthorized minting; foundation offers 10% recovery bounty (30.652 ETH) for return of 275.872 ETH within 72 hours.
Security & Exploits ·
Cysic has posted an on-chain message to the party responsible for exploiting its protocol, offering a recovery bounty in exchange for the return of stolen funds. The exploit involved the unauthorized minting of 10,000,000 CYS tokens, which were converted to approximately 306.524 ETH in total proceeds. The foundation is requesting that 275.872 ETH be returned to its designated address within 72 hours from the on-chain publication of the message on Ethereum mainnet.
Under the terms of the offer, the exploiter would be permitted to retain approximately 30.652 ETH—representing roughly 10% of the identified proceeds—as a recovery bounty, provided the larger sum is returned by the deadline. Cysic stated it has reconstructed the attack stages and preserved technical and on-chain evidence to support enforcement action.
The foundation indicated that failure to comply with the 72-hour window would result in escalation to law enforcement for criminal investigation. Whether the exploiter will accept the settlement terms or dispute the claims remains unclear, as does the ultimate recovery of the stolen funds.