Payy has frozen all deposits, withdrawals, transfers and card payments while it carries out an investigation according to incident response guidelines. Security researchers from PeckShield and Exvulsec reported that the hacker swapped the stolen funds for 683.38 ETH and used compromised prover and validator keys to forge the withdrawal batch.
