Payy Network

378132 USDC withdrawal to the attacker alongside ordinary withdrawals. The batch was submitted using Payy’s prover and validator infrastructure.

ExVul reports that the malicious withdrawal had an all-zero burn hash that users cannot normally generate through Payy’s public circuits, indicating that the forged withdrawal entered during proving or aggregation rather than through an ordinary user withdrawal. Payy has confirmed the bridge exploit but has not yet established whether the cause was compromised prover/validator credentials or a proof-aggregation verification flaw.