Three crypto initiatives have been attacked on September 24, struggling mixed losses of greater than $11M. Attackers drained round $1.8M from Payy Community, stole $7M from Duelbits, and minted $2.3M in unbacked tokens on the Meter community; these three are the newest crypto hacks to hit the business.
The incidents affected completely different elements of crypto infrastructure, starting from cross-chain bridges to non-public keys. Two of the three affected initiatives had already suffered main hacks in earlier years.
Payy Community, which supplies on-chain payroll and treasury administration providers, was the primary to report an assault. Its Ethereum bridge was compromised, prompting the group to halt the community.
Confirming a ~$7M hack. Nonetheless investigating precisely what occurred and the way.
Till we’ve got readability, Duelbits stays offline. Person funds are secure.
Subsequent steps: end the investigation, re-top scorching wallets, and produce Duelbits again on-line, launch Duelbits 2.0.
I'll preserve posting… https://t.co/V4Zl4St31I— Joe (@DuelbitsJoe) September 24, 2026
Contemporary Crypto Hacks: Payy Community and Duelbits Kose Almost $9M
Onchain researcher Specter has recognized suspicious transactions originating from the Payy Community bridge. The attacker initially acquired funds by way of the privateness protocol Railgun and subsequently swapped the stolen $1.8M in USDC for Ethereum.
Payy Community later confirmed that the attacker had fully drained the bridge’s steadiness. The corporate stated the funds concerned have been non-custodial deposits belonging to Payy Community and Payy Pockets customers, however it has not disclosed the precise explanation for the exploit.
The attacker’s subsequent goal was the cryptocurrency playing and betting platform Duelbits. PeckShield initially estimated the losses at $4.3M, however Specter later discovered further affected addresses on the Bitcoin and Solana networks, revising the estimate first to $4.9M after which to $5.9M.
A Duelbits co-founder finally reported losses of round $7M, most certainly because of a compromised personal key. In 2024, the platform confronted one other assault and misplaced $4.6M, which CertiK additionally linked to a possible personal key leak.
We’ve completed preliminary root trigger evaluation of the exploit and are working with a high audit agency to validate it earlier than releasing.
It was NOT a compromised key, social engineering or exploit of our off-chain infrastructure.
We intention to have a totally validated report back to share in… https://t.co/6p8CM0n3gd— Payy (@payy_link) September 25, 2026
Earn $50 and Enter $300K Prize Draw on EdgeX
Meter Assault Sends Two Tokens Plunging
The third affected venture was the EVM blockchain Meter.io. In contrast to the Payy Community assault, the place the hacker drained present bridge reserves, this hacker exploited a flaw in block verification to mint unbacked tokens.
Based on Blockaid, the attacker created about $2.3M in belongings after which bought them by way of the decentralized trade PancakeSwap.
The Meter group stated it preserved the community’s state, however it nonetheless hasn’t decided how one can absolutely restore it. The sale of those unbacked belongings drove sharp declines in Meter-related tokens; MTR misplaced almost 80% of its worth, whereas MTRG fell by about 75%. Beforehand, in 2022, the venture suffered a bridge exploit that precipitated losses of about $4.4M.
This sequence of assaults coincided with a bigger incident involving Bitget, which reported unauthorized asset transfers totaling about $351.6M from a restricted variety of wallets.
In response, Bitget quickly suspended withdrawals whereas conducting safety checks. Nevertheless, buying and selling and deposits continued usually, and consumer balances displayed appropriately. The corporate is at the moment investigating the incident and analyzing the motion of the funds.
Earlier, we reported that KelpDAO filed a lawsuit towards LayerZero and its co-founder, Brian Pellegrino, relating to a $292M hack. KelpDAO claims undisclosed dangers and shortcomings in LayerZero’s know-how precipitated the assault.
Uncover: The Finest Token Presales
The publish Crypto Hacks: Three Initiatives Hacked in One Day as Losses Hit Over $11M appeared first on Cryptonews.