Cysic's blacklist came 76 minutes after the mint, once 7.2 million CYS were dumped

On October 17, a forged mint message forced 10 million unauthorized CYS tokens out of Cysic’s cross-chain bridge. The attacker’s wallet dumped 7.2 million of them and moved about $727,000 into Ethereum before the project locked it up. Two selling rounds fetched 588,315 USDT and 220 BNB On-chain data reveals a fraudulent mint hit BNB Smart Chain at 12:31 UTC on October 17. But the foundation’s incident report says that Cysic did not blacklist the receiving wallet in the CYS contract until 13:47 UTC. The gap was 76 minutes long. The address had stopped sending tokens 48 minutes before the freeze and had moved its proceeds from BNB Chain by the time the freeze struck. Blacklist took the remains: ~2.8 million CYS that can no longer be transferred.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Cryptopolitan.