
Payy Post-Mortem Blames Noir Verifier Flaw for $1.9M Bridge Loss
Payy's post-mortem pins its September 24 bridge exploit on a flaw in Aztec's Noir/Barretenberg verifier that accepted an invalid burn proof, draining ~1.92M USDC.
Listen to narrated articles from the SpendNode Journal. The feed covers crypto policy, payment rails, stablecoins, market structure, and crypto cards, with each episode linking back to the full written analysis. The full RSS feed lives at /audio.xml if you want to pull it into an app that accepts external feeds.


Payy's post-mortem pins its September 24 bridge exploit on a flaw in Aztec's Noir/Barretenberg verifier that accepted an invalid burn proof, draining ~1.92M USDC.

SlowMist says suspected North Korean hackers moved stolen Bitget assets through Chainflip and CoW, exposing the cross-chain laundering playbook behind the hack.

Binance Pay now works at PayPay-accepting merchants across Japan, connecting crypto balances to one of the country's largest QR payment networks for retail spending.

SEC Chair Paul Atkins told CNBC the agency is proceeding to clarify how to raise money onchain even after the CLARITY Act failed in Congress.

The ECB is inviting fintechs and payment firms to test digital euro features, with 2027 workshops on AI-enabled and machine-to-machine payments.

Tether says it helped authorities freeze nearly $550M in Iran-linked USDT in 2026, showing how centralized stablecoin issuers act as compliance agents.

CleanSpark subsidiary CSDC Finance closed a $2.276B private offering of senior secured notes, one of the largest debt raises tied to a listed Bitcoin miner.

The UK's FCA secured a confiscation order so victims of a £1.5m crypto investment fraud can recover lost funds, a rare full-restitution outcome in crypto cases.

The White House publicly blamed Democrats for failing to pass the Crypto Clarity Act, escalating pressure on US crypto market structure legislation.

Bitget restarted Bitcoin withdrawals at 08:00 UTC on Sept 28 after its Sept 24 security incident, saying the flaw is fixed and user balances are intact.