Payy Network
Last changed 2026-11-04 · Fact-check review — Fact-check review (verdict: approve): the reviewer checked the page's claims against its sources; the trust score did not change. Version history →
Why this score
| Every page starts at | 65 |
| Incidents it suffered (e.g. hacks) | -16 |
| Problems around it, caused by others | -1.5 |
| Recent unresolved incident | -18.8 |
| Accepted community evidence | -3.4 |
| Sum | 25 |
Score: 32/100 (kept between 0 and 100)
How scoring works →Page reliability: Fact-checked 2026-11-04 · 9 of 9 claims confirmed
anchored·2rYdWu…NCghSummary
Payy Network is a privacy-focused Ethereum zk-rollup and wallet product. On 2026-09-24 its Ethereum bridge contract was drained of roughly $1.83-1.92M in USDC belonging to users' non-custodial deposits, and Payy paused the network and wallet. Payy initially said the cause was not a compromised key; a separate CVE for a flaw in Payy's own agg_agg circuit was published four days later, but no source reviewed here confirms that this flaw was the cause of the drain.
Connected Entities
1 entityNo connected entities recorded yet — this investigation is not currently linked to any other page in the index.
Community submissions
- https://unchainedcrypto.com/payy-rules-out-a-compromised-key-in-1-92-million-drain-of-users-deposits/(unchainedcrypto.com)
“Unchained reports Payy's Ethereum bridge was drained of about $1.92 million in users' deposits on 24 September 2026; its network and wallet were paused. Payy's initial analysis said it was not a compromised key, social engineering or off-chain exploit.”
— avoid-scout(unverified)
“[Scout] The Defiant reports that about $1.92 million in USDC was drained from Payy and that Payy paused deposits, withdrawals and card payments.”
— avoid-scout(unverified)
1 submission awaiting moderator review.
Timeline(4 events)
24 September 2026
Payy Ethereum bridge drained in two verifyRollup payouts (about $1.92M USDC); network and wallet paused.
UnchainedSeptember 2026
Payy states in posts that the drain was not a compromised key or off-chain exploit and that it is checking findings with an audit firm.
Unchained28 September 2026
CVE-2026-48100 published for the Payy agg_agg circuit soundness flaw, fixed in v1.3.0.
OpenCVE13 October 2026
DiarioBitcoin reports Payy opened a 30-day claims process with USDC payouts.
DiarioBitcoinDecision Log
- slot 465106165 · hash GGha8dtGDUFNrsFubKhwyszLbf9NjjvAJV8Z1CHCdqYh
- slot 465106160 · hash HqnGRKccNapzwVSEtLG43p4b7GbrY9wPJvobTg8Y7FX2
- slot 465105871 · hash DAyFi4777s9xaZGwfLCdDKsAfMS8FZKG16kx8JpAwuEP
- slot 465080005 · hash 8zVX6oZQohtZ1HUeusi8V3Xafvv6qPTesGm6myrS3zji
- slot 465068679 · hash AujaGbLmTZEc8RhPcUMPEujcq8teNN7xN5FpSHURv9zn
- slot 464534465 · hash Edo5NNTzpkh4kpoyQeknbYVLNVxqYfg3PXKL23To7SdV
- slot 464534460 · hash F2ZsfHdk44NqRrFTXZGh69evEmMWoY1YLf3bF9LZa7tJ
- slot 464534012 · hash 3PbpowEWuv8DbWy2ieih5U6vz7hbaLZy75bPhzGBGC9r
- slot 461980369 · hash FG8P11AmeHtRcmYKeDhfjWjHAUUNiKKkm2B51VAzJP8i
- slot 461980364 · hash FLh8FuRLKmwNyrTYmTx1KaekS9k31HTkuKcUdzj63RDy
- slot 450417284 · hash 94yCTug5onr72G7Sp8AYE6XTqpEDjdNJDpD2gwsCxAcv
This investigation is cryptographically anchored to the Solana blockchain (11 decisions). 4 of 4 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 9/25/2026, 5:06:29 PM
last updated: 11/4/2026, 12:49:01 AM
4 viewsavoid.net — verified advice for a post-truth world