Ethereum Bridge Hack Drains Payy Network Funds, Services Suspended

Payy Network announced that a malicious actor succeeded in exploiting a vulnerability in its Ethereum bridge contract, emptying the platform's entire balance and prompting an immediate shutdown of both the network and its wallet services.

The platform, which offers users non‑custodial deposit capabilities across multiple blockchain ecosystems, relied on the bridge to move assets between its own chain and Ethereum. By design, such bridges are intended to provide seamless liquidity, but they also represent high‑value targets for attackers seeking to intercept or reroute funds.

According to the brief statement released by Payy, the breach stemmed from a flaw in the bridge's smart‑contract code that allowed the attacker to trigger unauthorized withdrawals. While technical specifics were not disclosed, similar incidents in the decentralized finance space often involve misconfigured access controls, unchecked external calls, or logic errors that can be manipulated to bypass intended safeguards.

The fallout directly affects users who had stored non‑custodial deposits on the network, as those assets were held in the compromised contract at the time of the attack. Payy responded by freezing all operations to prevent further loss and is reportedly working with security auditors to trace the stolen funds and assess the full scope of the compromise. The incident underscores the ongoing risk profile of cross‑chain bridges, which have become frequent flashpoints for large‑scale thefts in recent months.

Looking ahead, Payy Network has pledged to conduct a thorough forensic review and to implement stricter code audits before any future re‑launch. The episode adds to mounting pressure on the broader crypto industry to adopt more robust development standards and to consider insurance mechanisms for users of high‑risk protocols. Regulators and market participants alike are watching closely, as repeated bridge failures could erode confidence in decentralized finance’s promise of interoperable, trustless asset movement.