Payy (@payy_link) said on X at 14:04 UTC on 24 September 2026 that at 4:21 UTC that day its bridge contract on Ethereum 'was exploited and drained of its full balance', and that while it investigates 'all Payy Network transactions are paused including deposits, withdrawals, transfers and card transactions'.

In follow-up posts that day Payy said it had notified law enforcement and was working with multiple incident response organisations (14:35 UTC); that 'Law enforcement, exchanges, blockchain analytics companies and other relevant parties have been notified of attacker addresses' (16:02 UTC); that 'We have paused functionality on Payy Wallet' (16:04 UTC); and that 'the stolen funds were users' non-custodial deposits to Payy Network / Payy Wallet' (17:58 UTC). Those posts did not give the amount stolen, the vulnerability class or the attacker addresses.

Primary: Payy posts on X (24 Sep 2026).