# bridge exploit — X 热门讨论 (2026-09-29 22:57 UTC)
## @payy_link (Payy) · 09-29 21:30 · ♥31 ↻2 💬6 Post mortem for the September 24th, 2026 exploit of Payy's bridge contract.
Based on our investigation, it appears that an attacker submitted an invalid burn proof that Payy’s deployed Noir/Barretenberg verifier accepted.
The first burn released 1,828,589.378132 USDC from the Payy rollup even though it appears that the transaction was invalid. A second burn of 1 USDC was paid early by a burn substitutor and later reimbursed. The second transaction released 90,202.820016 USDC to the same receiving wallet.
It appears there was a proving-system vulnerability in the Noir/Barretenberg verifier, developed by Aztec.
Full report: https://t.co/lrMEhQuKhO > 引用 @payy_link: Today at 4:21 UTC Payy’s bridge contract on Ethereum was exploited and drained of its full balance.
Investigation is ongoing and we are following incident response guidelines.
While we investigate, all Payy Network transactions are paused including deposits, withdrawals, transfers and card transactions.
We will continue to communicate updates here. https://x.com/payy_link/status/2105047468639658317
## @Verdict_Finance (Verdict) · 09-29 11:16 · ♥20 ↻5 💬2 Chainlink CCIP 2.0 Shipped. Here Is What Actually Changed. And What Didn't. https://x.com/Verdict_Finance/status/2104893077211238857
## @D2_Finance (D2 Finance) · 09-29 13:53 · ♥20 ↻2 💬1 We've been eating well above 11% annualised on our own version of this, in a small sleeve running IBKR against Hyperliquid. We don't trade Binance, so USDe gives us potentially their basis on a venue we never touch, with ADL priority we can't buy.
We're bringing carry back.
Since March, HYPE++ has run at close to 10% APR with only ~15% of capital deployed on average, while the other ~85% sat idle. Next epoch that 85% has somewhere to go again.
The last epoch closed +2% net, ~13% APR, with nothing in DeFi lending. That was a choice: within hours of the Kelp rsETH exploit hitting Aave on 18 April, we stopped allocating to DeFi outside Hyperliquid and Derive, and nothing has gone back since.
In April capital was scarce and the yield did not pay for the risk. Today stablecoin carry on @aave and @Morpho lists at 5-7% on Merkl, incentives included, and @ethena USDe loops and @pendle_fi PTs add new ways to build base carry under the book.
The risk math moved too. $AAVE, $MORPHO, $ENA and $PENDLE have re-rated, and a protocol with a valuable token can raise to make users whole. April showed it working: DeFi United raised $160M in a week to backstop Aave after Kelp.
Aave has since cut 230+ supply and borrow caps on V3 and now vets bridge and oracle dependencies before listing collateral, the exact gap Kelp's unbacked rsETH came through.
We do not project returns. The next print will show what putting that idle capital to work adds.
Our Alpha Strategies (HYPE++) Reopens for deposit / withdraw window within 72h 👀
Fade D2 at your own risk. > 引用 @ethena: Ethena is partnering with @Binance as our first venue for the extension of the basis trade into equity perpetuals, one of the most exciting updates to the USDe collateral backing since launch.
This expands the addressable market of underlying collateral from $2.5 trillion of crypto to $150 trillion+ of real-world assets.
As part of the partnership, bStocks will serve as tokenized spot collateral, hedged with Binance USDT-denominated equity perpetuals - the same delta-neutral structure Ethena has securely executed across crypto assets since inception.
Importantly, Binance provides lower ADL priority for eligible delta-neutral accounts including Ethena's, adding another layer of risk mitigation for USDe holders.
Binance equity basis has averaged ~11%+ annualized over the past 6 months, while open interest has grown on average ~30% per month in the last 3 month period.
We expect the market opportunity size for equity perpetuals to far exceed the $15b+ of crypto perpetuals captured by Ethena last cycle.
Allocations begin today. https://x.com/D2_Finance/status/2104932619808829932