Payy Network (Victim): news timeline & CVEs

Attackers Drain Payy Network After Exploiting Ethereum Bridge Contract

Attackers exploited Payy Network's Ethereum bridge and drained its full balance, forcing a service suspension.

Payy Network confirmed that an attacker exploited its Ethereum bridge contract around 04:21 UTC on September 24, 2026, and drained the contract's full balance. The company suspended the network and wallet, including deposits, withdrawals, transfers, and card transactions. Payy said the stolen assets were users' non-custodial deposits but has not disclosed the amount, attacker addresses, transaction hashes, or root cause. It notified law enforcement, exchanges, and blockchain analytics firms while tracing the funds.

GBHackersSep 25, 06:09 UTC · 2d agoExploit / PoC in the wild 2 sources

Hackers Exploited Ethereum Bridge Contract to Drain Full Balance from Payy Network

Attackers exploited Payy’s Ethereum bridge and drained its full balance, pausing the network.

Payy Network said attackers exploited its Ethereum bridge contract at about 4:21 UTC on September 24 and drained the contract’s entire balance. The bridge supported transfers between Ethereum and Payy Network, and Payy said the stolen assets were users’ non-custodial deposits tied to Payy Network and Payy Wallet. The company paused deposits, withdrawals, transfers, card transactions, and wallet functions while investigating. It has not disclosed the flaw type, stolen amount, or attacker addresses, but said it notified law enforcement, exchanges, and blockchain analytics firms.

Cyber Security Newsupdated Sep 25, 06:09 UTC · 2d agofirst Sep 25, 05:18 UTC · 2d agoExploit / PoC in the wild 2 sources

Payy Network

Timeline2 articles

Appears with

Attackers Drain Payy Network After Exploiting Ethereum Bridge Contract

Hackers Exploited Ethereum Bridge Contract to Drain Full Balance from Payy Network