Cysic has offered a settlement to the attacker who allegedly minted 10 million CYS without authorization. The attacker would need to return 275.872 ETH to a Cysic Foundation-designated address within 72 hours of the on-chain announcement, representing about 90% of the confirmed ETH proceeds. In exchange, the attacker could keep approximately 30.652 ETH as a bug bounty. Cysic said it reconstructed the key stages of the attack and retained related technical and on-chain evidence. If the funds are not returned within the deadline, the project plans to escalate the matter, seek law-enforcement involvement and pursue a full criminal investigation, PANews reported on Oct. 22.