Three crypto projects suffered attacks on September 24, 2026, with combined losses exceeding $11 million. Payy Network lost about $1.8 million after its Ethereum bridge was drained, while cryptocurrency betting platform Duelbits reported losses of around $7 million, most likely linked to a compromised private key. Meter.io attackers exploited a block-verification flaw to mint roughly $2.3 million in unbacked tokens and sell them through PancakeSwap, causing MTR to fall nearly 80% and MTRG about 75%. Payy halted its network and said the stolen funds came from non-custodial deposits belonging to Payy Network and Payy Wallet users, while continuing to investigate the exploit. Duelbits remained offline as it investigated, replenished hot wallets and prepared to restore operations with Duelbits 2.0. Two of the affected projects had previously suffered major hacks. The incidents coincided with Bitget reporting unauthorized transfers totaling about $351.6 million from a limited number of wallets and temporarily suspending withdrawals. Separately, KelpDAO filed a lawsuit against LayerZero and co-founder Brian Pellegrino over a $292 million hack, alleging undisclosed risks and shortcomings in LayerZero technology.