Payy Halts Network After $1.92 Million USDC Drain

0Importance
closedStatus
1News media
Published

Payy stopped network activity and card services on Sept. 24 after its Ethereum bridge was exploited. Onchain records tied two withdrawal batches to the same attacker-linked address, and the company confirmed the attack.

Key claims & sources

✓
Payy halted transactions on Sept. 24 after an exploit of its Ethereum bridge.
✓
Onchain records show two withdrawal batches sent about 1.92 million USDC to the same attacker-linked address.
✓
Payy paused deposits, withdrawals, transfers and card payments after its Ethereum bridge contract was exploited on Sept. 24.
✓
The company has not disclosed customer losses or a restart date.

What it means

Users and cardholders who relied on Payy would notice that deposits, withdrawals, transfers and card payments were all paused on Sept. 24. That means normal network use and card activity were stopped at the same time, with no restart date disclosed yet.

Before this, Payy processed network transactions and card payments; after the pause, those functions were unavailable. What remains unchanged is that the company has not disclosed customer losses, so the effect on individual balances is still not spelled out in the available material.

Market reaction i

EthereumETH the event is about this asset

Ethereum rose 0.1% in the 4 hours after the first headline.

$2,684 price at the headline
— 2 h before
+0.1% 4 h after
-0.2% 12 h after
First headline

26 prices, one every 30 minutes

Coverage timeline

Every piece in order, with the time its news medium declares — if it is not believable we use ours and say so — and what it added to what was already known at that point. Arriving first is not the same as adding something.

first
Sep 24 16:53
The Defiant scoop
Breaks the event: $1.9M

Thefts of a similar size

WhenWhat happenedFigure
7 months ago Dango · Missing Input Validation incident $1.9M
1.1 years ago New Gold Protocol · Spot Price Manipulation incident $1.9M
1.9 years ago GemPad · Reentrancy incident $1.9M
2.0 years ago Aark Digital · Incorrect balance update incident $1.9M
2.5 years ago pump.fun · Flash loan attack incident $1.9M

4299 incidents stored · 752 were as large as this one or larger ($1.9M)