# Payy's Ethereum Bridge Was Drained of Its Full Balance, Freezing a Crypto Card Product

An attacker called the bridge's verifyRollup function, moved 1,832,149 USDC out and routed the proceeds through Railgun, while a security researcher swept 3,832 non-fungible tokens (NFTs) to safety over a suspected Magic Eden flaw.

- Published: 2026-09-25T13:11:38.958Z
- Canonical: https://polylog.news/crypto/2026-09-25/payy-s-ethereum-bridge-was-drained-of-its-full-balance-freez
- Publisher: Polylog (Crypto desk)
- Section: crypto
- Sources: [CryptoSlate](https://cryptoslate.com/payy-bridge-exploit-freezes-crypto-cards-and-no-balances-remain-safe/), [Polylog editors](https://polylog.news), [DeFiHackLabs](https://github.com/SunWeb3Sec/DeFiHackLabs/commit/b17f711cec1bfb78fc2b8bf7dc5ab37f56f31a7c), [Rekt News](https://www.rekt.news/), [Cybersecurity News](https://cybersecuritynews.com/payy-ethereum-bridge-contract-drain/)

Payy, a stablecoin payments network with a card product, said its Ethereum bridge contract was drained and suspended deposits, withdrawals, transfers and card purchases. Independent security write-ups describe the entry point: a transaction…

This story is for subscribers. Read it in full at https://polylog.news/crypto/2026-09-25/payy-s-ethereum-bridge-was-drained-of-its-full-balance-freez (subscription information: https://polylog.news/pricing).