PeckShieldAlert Ties $740,000 Tornado Cash Deposit to Cysic Attacker

PeckShieldAlert attributed a Friday, Oct. 23 deposit of 300 Ether (ETH) and 30.4 BNB, worth about $740,000, to the attacker linked to Cysic’s bridge exploit. The assets went into Tornado Cash, a mixing protocol that makes deposits and later withdrawals harder to connect. The deposit alone does not establish that the funds were sold or recovered.

The exploit involved an unauthorized mint of 10 million Cysic (CYS) tokens on BNB Chain. At 8:31 a.m. ET (12:31 UTC) Saturday, Oct. 17, the attacker minted the tokens. Selling began about five minutes later. About 7.2 million CYS had been sold across 15 transactions by 8:59 a.m. ET (12:59 UTC), before proceeds were converted into about 306.6 ETH.

Cysic offered 30.652 ETH if the attacker returned 275.872 ETH within 72 hours under its recovery proposal. The deadline begins when Cysic’s on-chain notice was published, and repayment was to go to an address designated by Cysic Foundation.