Maya Protocol exploit drains bitcoin and other assets as pool value drops $11 million
·2 min read
Compiled by KHAO Editorial
— aggregated from 2 sources + 8 references discovered via search.
See llms.txt for citation guidance.
✓ KHAO Verified
Cross-chain liquidity protocol Maya Protocol halted its MAYAChain network after a series of software bugs created a false balance in one of its liquidity pools, allowing an attacker to drain nearly $1.7 million in bitcoin BTC $ 64,453.62, and other assets, and created a further fallout that caused roughly $11 million in total losses.
Key facts
Founder said on X exploited for 20 BTC ($1.4 million) plus roughly $300,000 of other assets
Onchain records show 20.83 BTC worth about $1.34 million was sent to the attacker's bitcoin address
The technical reconstruction estimated the attacker personally extracted about $1.65 million including tokens still held on-chain, while a much larger decline in pool value came from arbitrage
The attacker then deposited a tiny amount into the distorted pool and ended up owning more than 99% of it
Summary
Maya Protocol halted MAYAChain after an attacker chained together six software bugs to trick the network’s accounting and drain about $1.7 million in bitcoin and other assets. The damage went well beyond what the attacker took. A preliminary reconstruction found the attack depended on several failures working in sequence, including a false theft alert, faulty handling of outgoing transactions and bad liquidity-pool calculations, showing how multiple relatively narrow bugs can combine into a much larger failure. Founder said on X exploited for 20 BTC ($1.4 million) plus roughly $300,000 of other assets.