Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCmediumExploited in the wild

Attackers Drain Payy Network After Exploiting Ethereum Bridge Contract

GBHackersby Divya ()2 min read2 · 1 read
AI summary · grok-4.7Summaries by Vani AI

Attackers exploited Payy Network's Ethereum bridge and drained its full balance, forcing a service suspension.

Payy Network confirmed that an attacker exploited its Ethereum bridge contract around 04:21 UTC on September 24, 2026, and drained the contract's full balance. The company suspended the network and wallet, including deposits, withdrawals, transfers, and card transactions. Payy said the stolen assets were users' non-custodial deposits but has not disclosed the amount, attacker addresses, transaction hashes, or root cause. It notified law enforcement, exchanges, and blockchain analytics firms while tracing the funds.

Key facts
  • Payy said its Ethereum bridge contract was exploited and fully drained.
  • The exploit occurred around 04:21 UTC on September 24, 2026.
  • Network, wallet, deposit, withdrawal, transfer, and card services were suspended.
  • Stolen funds were users' non-custodial bridge deposits; the amount is undisclosed.
  • Law enforcement was notified, and the technical root cause is still unknown.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

2 min read at gbhackers.com

Payy Network has confirmed that an attacker exploited its Ethereum bridge contract and drained its entire balance. As a result, the network and wallet services were immediately suspended. This incident affected users’ non-custodial deposits held within the Payy Network and Payy Wallet bridge infrastructure.

GBHackers

By Divya · gbhackers.com

Read the full article at GBHackers

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.