Exploit: Payy Network ($1.8M)
- Published
Payy Network reported an Ethereum bridge exploit tied to a logic flaw, with losses listed at about $1.8 million. A separate account says an attacker drained 1,832,149 USDC from the bridge contract in a single transaction on September 24, 2026, and Payy then stopped deposits, withdrawals, transfers, and card transactions.
Key claims & sources
What it means
Users who had non-custodial deposits in Payy Network and Payy Wallet were the ones directly tied to the drained funds, and Payy also stopped deposits, withdrawals, transfers, and card transactions. That means people trying to move funds through the service today would see those functions unavailable.
Market reaction i
Ethereum fell 0.5% in the 4 hours after the first headline, after rising 0.1% in the 2 hours before.
44 prices, one every 30 minutes
Coverage timeline
Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.
DefiLlama hacks
The Crypto Guardian
adds
our clock
Thefts of a similar size
| When | What happened | Figure |
|---|---|---|
| 2.3 years ago | Nexera · Malware attack incident | $1.8M |
| 4.8 years ago | KLAYswap · Malicious code injection attack incident | $1.8M |
| 3.5 years ago | Merlin · Rug pull incident | $1.8M |
| 1.1 years ago | Abracadabra · Logic flaw incident | $1.8M |
| 2.3 years ago | DoughFina · Incorrect input validation incident | $1.8M |
4299 incidents stored · 762 were as large as this one or larger ($1.8M)