Three crypto initiatives have been attacked on September 24, struggling mixed losses of greater than $11M. Attackers drained round $1.8M from Payy Community, stole $7M from Duelbits, and minted $2.3M in unbacked tokens on the Meter community; these three are the newest crypto hacks to hit the business.
The incidents affected totally different components of crypto infrastructure, starting from cross-chain bridges to non-public keys. Two of the three affected initiatives had already suffered main hacks in earlier years.
Payy Community, which offers on-chain payroll and treasury administration providers, was the primary to report an assault. Its Ethereum bridge was compromised, prompting the staff to halt the community.
Confirming a ~$7M hack. Nonetheless investigating precisely what occurred and the way.
Till we now have readability, Duelbits stays offline. Consumer funds are protected.
Subsequent steps: end the investigation, re-top scorching wallets, and convey Duelbits again on-line, launch Duelbits 2.0.
I'll preserve posting… https://t.co/V4Zl4St31I— Joe (@DuelbitsJoe) September 24, 2026
Recent Crypto Hacks: Payy Community and Duelbits Kose Practically $9M
Onchain researcher Specter has recognized suspicious transactions originating from the Payy Community bridge. The attacker initially acquired funds by way of the privateness protocol Railgun and subsequently swapped the stolen $1.8M in USDC for Ethereum.
Payy Community later confirmed that the attacker had utterly drained the bridge’s steadiness. The corporate stated the funds concerned have been non-custodial deposits belonging to Payy Community and Payy Pockets customers, nevertheless it has not disclosed the precise reason behind the exploit.
The attacker’s subsequent goal was the cryptocurrency playing and betting platform Duelbits. PeckShield initially estimated the losses at $4.3M, however Specter later discovered extra affected addresses on the Bitcoin and Solana networks, revising the estimate first to $4.9M after which to $5.9M.
A Duelbits co-founder ultimately reported losses of round $7M, most definitely as a result of a compromised non-public key. In 2024, the platform confronted one other assault and misplaced $4.6M, which CertiK additionally linked to a possible non-public key leak.
Now we have completed preliminary root trigger evaluation of the exploit and are working with a high audit agency to validate it earlier than releasing.
It was NOT a compromised key, social engineering or exploit of our off-chain infrastructure.
We intention to have a completely validated report back to share in… https://t.co/6p8CM0n3gd— Payy (@payy_link) September 25, 2026
Earn $50 and Enter $300K Prize Draw on EdgeX
Meter Assault Sends Two Tokens Plunging
The third affected undertaking was the EVM blockchain Meter.io. In contrast to the Payy Community assault, the place the hacker drained current bridge reserves, this hacker exploited a flaw in block verification to mint unbacked tokens.
In line with Blockaid, the attacker created about $2.3M in belongings after which offered them by way of the decentralized trade PancakeSwap.
The Meter staff stated it preserved the community’s state, nevertheless it nonetheless hasn’t decided easy methods to absolutely restore it. The sale of those unbacked belongings drove sharp declines in Meter-related tokens; MTR misplaced almost 80% of its worth, whereas MTRG fell by about 75%. Beforehand, in 2022, the undertaking suffered a bridge exploit that induced losses of about $4.4M.
This sequence of assaults coincided with a bigger incident involving Bitget, which reported unauthorized asset transfers totaling about $351.6M from a restricted variety of wallets.
In response, Bitget briefly suspended withdrawals whereas conducting safety checks. Nonetheless, buying and selling and deposits continued usually, and person balances displayed appropriately. The corporate is at present investigating the incident and analyzing the motion of the funds.
Earlier, we reported that KelpDAO filed a lawsuit towards LayerZero and its co-founder, Brian Pellegrino, concerning a $292M hack. KelpDAO claims undisclosed dangers and shortcomings in LayerZero’s expertise induced the assault.
Uncover: The Greatest Token Presales
The put up Crypto Hacks: Three Initiatives Hacked in One Day as Losses Hit Over $11M appeared first on Cryptonews.