Payy bridge exploit drained roughly 1.92 million USDC after verifier flaw

Verifying
  • Payy disclosed that its bridge verifier accepted an invalid burn proof.
  • Roughly 1.92 million USDC moved to one wallet through two transactions.
  • Payy attributed the flaw to Aztec’s Noir/Barretenberg tooling, not a private-key compromise.
The information on this website is generated using AI and we cannot guarantee its accuracy. Please use it as reference information only.