Independent RWA research desk · Status: operationalMethodology & corrections · Submit a story
Incident record · Under review

Three DeFi Exploits Swipe $11M from Payy, Duelbits,: Smart-contract vulnerability

TL;DR: On September 24, 2026, three independent security incidents accumulated combined losses exceeding $11 million. The Duelbits platform recorded the day’s largest theft, with nearly $7 million drained from its hot wallets. The Meter.io and Payy Network protocols suffered losses of $2.3 million and $1.8 million, respectively, through verification flaws and bridge vulnerabilities. The DeFi ... Read more

StatusUnder review
Reported loss$11.0M
ChainNot specified
Confidence55%

Evidence boundary

Confidence describes the coverage of the available evidence. It is not a safety rating and does not guarantee that a protocol or asset is safe.

Sources

Record history

First seen: 2026-09-25T11:39:31.000Z. Last updated: 2026-09-25T20:25:15.296Z. Revision: 1.