New on-chain analysis has clarified the movement of funds from the Cysic bridge exploit. After 10 million unauthorized $CYS were minted on BNB Smart Chain on October 17, the attacker sold 7.2 million tokens before the receiving address was frozen. The Block traced the sales through DEX routes, including PancakeSwap, and cross-chain transfers through Mayan, deBridge and SWFT.

The proceeds reached Ethereum as approximately 306.6 $ETH , valued at about $727,000 at the time of reporting. The attacker then transferred roughly 306.52 ETH to another wallet. The remaining 2.8 million CYS were blacklisted on BNB Chain, but that restriction does not freeze the ETH already moved.

Cysic says its mainnet and existing user-wallet assets were not compromised. The project has not confirmed a final dollar loss, and its bridge remains suspended pending security review.