Exchange Reserves Sink to a Record Low

Ethereum's (ETH) exchange reserves have fallen to 3.49% of total supply, the thinnest level on record, and the outflow has continued even as price momentum cooled. According to on-chain exchange-balance data, 1.16% of the entire ETH supply left the venues tracked in the dataset since June 1, 2026 — a steady drain that shrinks the pool of coins available for immediate buy- or sell-side execution.

A declining reserve does not by itself point to higher prices. Coins leaving platforms can move into long-term self-custody, into staking contracts that help secure the network in exchange for rewards, or into decentralized finance (DeFi) protocols. Both of those channels are currently active: roughly 35% of all ETH is now estimated to be staked, while assets locked across DeFi total about $53 billion. Unlike exchange holdings, staked balances must pass through the network's exit process before they can move again.

Corporate treasuries have added to the shift. Earlier in September, Bitmine (BMNR) disclosed that it had staked more than 5 million ETH, joining long-term holders whose self-custody decisions keep thinning exchange balances. Much of the ETH that once sat on trading platforms awaiting execution is now committed elsewhere on-chain.

Network Usage Held Firm Through the Pullback

Usage data moved in the opposite direction to price. Over the past month, ETH rallied from roughly $1,900 to $2,800 before easing back to around $2,660. During the pullback, however, gas usage still rose 0.26% to 217.1 billion units, and daily priority fees — the tips users pay to have transactions included in blocks sooner — jumped .74% to about $464,000.

Block production barely changed, at roughly 7,147 blocks, indicating the fee surge came from greater competition for existing block space rather than added capacity. In COINOTAG's reading, demand for gas fees across the Ethereum network held firm through the correction, and analysts who track the asset's return to its long-term regression band caution that exchange supply, network usage and price must each be read independently before calling a direction.

Payy Bridge Drained of 1.83M USDC

The same migration of value has a darker edge. Payy Network, a privacy-focused stablecoin payments provider, confirmed that its bridge contract on Ethereum was attacked at 04:21 UTC on September 24, 2026, and that the contract's entire balance was drained. Bridges of this kind hold pooled user deposits in a contract on Ethereum so value can move between the main network and Layer 2 systems, concentrating many users' funds behind a single set of validation logic.

On-chain records place the exploit at block 26,044,909, where the transaction linked to the attack invoked verifyRollup — the function through which rollup state updates, the mechanism Layer 2 systems use to settle to Ethereum, are validated. A total of 1,832,149.4681 USDC left the contract. Of that, 1,828,589.3781 USDC went to a single address, with the remainder split across smaller transfers. The transaction completed successfully and was not reverted.

In an official statement, Payy said it halted deposits, withdrawals, transfers and card payments after the incident, opened a security investigation, and shared attacker-linked addresses with law enforcement, crypto exchanges and blockchain analytics firms. Payy Wallet functions remain suspended pending review. The company also said the drained assets relate to non-custodial funds that users had deposited to Payy Network and Payy Wallet, and that efforts to recover them are ongoing.

Root Cause Still Unknown

What remains undisclosed matters as much as what is confirmed. No technical root cause has been officially released. The on-chain trace of verifyRollup does not by itself locate the flaw, and a compromised key, an authorization defect or a bug in the smart contract code all remain live possibilities until the team publishes its incident report.

The episode lands weeks after Bitget's $351.6 million hot wallet breach, which touched Ethereum and stablecoins, underlining that custody layers and bridges — the very structures absorbing ETH leaving exchanges — remain the sector's most attractive attack surface. For users of the affected payment rails, the freeze meant no card spending or transfers, a reminder that a single contract failure can switch off an entire payments stack. Ethereum itself was unaffected; the damage stayed at the application layer.

Supply Migration Sharpens Bridge Risk

Read together, the two stories describe one structural shift: ETH is moving out of exchange books and into staking contracts, DeFi protocols and rollup bridges, thinning immediate sell-side liquidity while concentrating value in the code that holds it. The on-chain evidence in the Payy case is unambiguous about the outflow — 1.83 million USDC in block 26,044,909 — but silent on cause, and remediation so far amounts to suspension and law-enforcement coordination rather than a disclosed fix.

COINOTAG's view: until a post-mortem settles whether keys, permissions or code failed, every bridge holding migrated ETH remains the weakest link in an otherwise deepening on-chain supply story.