The attacker minted 10 million CYS. Cysic’s response: return 275.872 ETH within 72 hours—about 90% of the confirmed ETH proceeds—and keep the remaining approximately 30.652 ETH as a white-hat bounty.

The announcement requires the funds to be returned to an address designated by the Cysic Foundation within 72 hours of the on-chain announcement. The project says it has reconstructed the key stages of the attack and preserved technical and on-chain evidence. If the deadline passes without a return, it will escalate the matter and seek law enforcement involvement to pursue a full criminal investigation.

Takeaway 1: Offering a 90% return and allowing the attacker to keep 10% as a bounty gives them a way out while putting the evidence trail on the table. Takeaway 2: The 72-hour window is firm; once it expires, the matter moves toward a criminal investigation, leaving less room for negotiation.

Do you think the attacker will take the bounty and walk away, or gamble by keeping the funds?

Source: PANews, October 22

Image 1: Cysic offers the attacker a 10% white-hat bounty and demands the stolen ETH be returned within 72 hours · Key Updates
Image source: https://www.panewslab.com/zh/articles/01a1631c-8ef8-722a-a0e0-dc40f9591a78