Cysic has proposed a settlement requiring an attacker to return 275.872 ETH within 72 hours of an on-chain announcement. The attacker minted 10 million CYS tokens without authorization. The proposed return represents approximately 90% of the confirmed ETH proceeds, with approximately 30.652 ETH left for the attacker as a bug bounty. Cysic said the project team will escalate its response and seek law enforcement involvement if the attacker misses the deadline.