🚨ExVul Security Incident Analysis Update We are officially engaged in the comprehensive joint investigation and on-chain tracing for the recent security incident involving the @cysic_xyz cross-chain bridge on BNB Smart Chain. 🔍 Current Investigation Focus: • Attack Path Analysis: Deep-diving into the database access vector and message processing logic vulnerability. • Fund Tracing & Monitoring: Tracking fund flows and monitoring the blacklisted recipient address (0xA4e1827Fe2664fD0797a55e442b2e2639449C255), which currently holds ~2.8M CYS. • Security Remediation: Assisting in risk validation and security hardening before bridge reopening. We are working closely with the Cysic team to uncover the full picture. Detailed technical findings and tracing results will be published in our upcoming joint report. Stay tuned for official updates. 🛡️ #ExVul# #Web3Security# #Cysic# #IncidentResponse# #SmartContractSecurity#

🚨 Exploit Alert — Ethereum ~10.7 ETH was drained from two legacy Visor/Gamma FLOAT-ETH Hypervisor vaults via a flash-loan price manipulation. 🔍 Root cause: the Hypervisor mints LP shares in deposit() off the Uniswap V3 pool's INSTANTANEOUS spot price (currentTick()/slot0) with no TWAP and no spot-vs-oracle deviation check — while withdraw() redeems shares for a proportional slice of the real underlying tokens. Minting is spot-priced, redemption is not. Move the spot price and deposit→withdraw becomes a net drain. Deposits are permissionless (whitelist disabled). 🧾 On-chain: Attacker: 0xaea29218262dc6b0904ca077f6527c49dfd426d9 Contract: 0x05303c95ee7ff76daf1421b28e024635d7fe51ab Vaults: 0x85cbed52…a8a70c · 0xc86b1e7f…c1153 Tx: 0x3d7549db65344da2a41067e17791b17fac16ec6b8e5132e82e243f6541de5cff Block: 25874402 · 2026-08-31