Cysic froze 2.8 million CYS after an unauthorized mint, but roughly $727,000 had reached Ethereum. The bridge remains closed pending a security review.