DeFi hack attack: Three exploits snatch $11M in a single day

HACK OR EXPLOITDeFi hack attack: Three exploitssnatch $11M in a single day37IMPORTANCECLOSED3NEWS MEDIA3PIECESSep 25, 2026 11:42blockboard.net

On September 24, three crypto projects were hit in separate incidents and the combined losses were reported at more than $11 million. The day’s largest theft was at Duelbits, while Payy Network and Meter also recorded losses.

What this rests on

Claim by claim, with its source
✓
Payy Network lost $1.8 million in the same round of incidents.
✓
Three separate security incidents were reported on September 24, with combined losses above $11 million across Payy Network, Duelbits, and Meter.
✓
Duelbits recorded about $7 million taken from its hot wallets.
✓
Meter lost $2.3 million, and one writeup described the event as an exploit involving unbacked token minting on the Meter network.

What it means

Who it affects, what changes and what is still unconfirmed

Each sentence links inside to the piece that supports it.

Users and customers connected to these projects would see the impact immediately in the form of disrupted services or reduced confidence in how these systems handle funds. Anyone monitoring DeFi security would also notice that three projects were hit on the same day, with losses spread across Payy Network, Duelbits, and Meter.

In practice, the events show that funds could be drained from hot wallets at Duelbits, that Payy Network’s loss was tied to a bridge-related issue, and that Meter’s loss was tied to a verification flaw or unbacked token minting. What remains the same is that each incident is still being described as a separate security failure rather than one shared event.

Market reaction

BT Bitcoin market event: it is read against the reference from 2 h before to 4 h after the line marks the first headline
published
+0.58 % before publication
-1.45 % after
$84,895price at publication
12series points

How the story was built

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 25 11:38
+6 h 47 m
Sep 25 18:25
Crypto Economy context
Its angle: vulnerabilities, verification, subsequently; with quotes
+2 d 1 h
Sep 27 13:30

Thefts of a similar size

WhenWhat happenedFigure
1.1 years ago UXLINK incident $11M
4.5 years ago Saddle Finance · Swap Logic Flaw incident $11M
5.4 years ago JBS · Ransomware incident $11M
5.4 years ago Value Defi · Cross contract reentrancy incident $11M
5.7 years ago YFI · Flash loan attack incident $11M

4200 incidents stored · 307 were as large as this one or larger ($11M)