Markets
Cysic dangles a 10% bounty, hacker pours loot into Tornado Cash
Oct 23, 2026, 10:13 UTC
Markets
Oct 23, 2026, 10:13 UTC
Oct 23, 2026, 10:13 UTC1 min read
The wallet linked to the Cysic bridge exploit sent about $744,000 in cryptocurrencies to Tornado Cash on Friday after the Cysic Foundation offered the attacker a 10% recovery bounty.
The address transferred 300 Ether (ETH) and 30.4 BNB to the crypto mixer, according to blockchain security company PeckShield.
The hacker exploited a bridge vulnerability to mint 10 million Cysic (CYS) tokens on BNB Smart Chain on Saturday. Cysic suspended the bridge and blacklisted the recipient address, freezing about 2.8 million of the newly minted tokens. The foundation said its mainnet and existing assets in user wallets were unaffected.
The following Thursday, the Cysic Foundation offered the hacker a 10% bounty in exchange for returning 275.872 ETH, worth about $665,000, representing roughly 90% of the identified Ether proceeds.
Tornado Cash pools deposits from multiple addresses, making the funds harder to trace. The attacker’s Ethereum wallet held just $45 in ETH at press time, according to Akham data.
