Six-Bug Exploit Pauses Maya Protocol After $1.4 Million in Bitcoin Stolen
·2 min read
Compiled by KHAO Editorial
— aggregated from 2 sources + 8 references discovered via search.
See llms.txt for citation guidance.
✓ KHAO Verified
Cross-chain liquidity network Maya Protocol halted operations Tuesday after an attacker exploited six software flaws to drain roughly $1.7 million in Bitcoin and other assets.
Key facts
In a post-mortem report, the team behind Maya Protocol said the attacker exploited six bugs to inflate a liquidity pool by 49.45 million CACAO, then gained 99.93% control of the pool and withdrew
Maya Protocol published the suspected attacker’s Bitcoin address, which received 20.83 BTC worth about $1.34 million
Cross-chain liquidity network Maya Protocol halted operations Tuesday after an attacker exploited six software flaws to drain roughly $1.7 million in Bitcoin and other assets
In April, attackers drained roughly $292 million from KelpDAO's cross-chain bridge after a social engineering attack compromised a developer's session keys
Summary
Maya Protocol halted MAYAChain after an attacker extracted roughly $1.7 million in Bitcoin and other assets. A post-mortem identified six bugs that created a false balance in a liquidity pool. CACAO plunged nearly 89% as the value of MAYAChain's liquidity pools fell by roughly $10.9 million. In a post on X explaining what happened, Maya Protocol founder AaluMyth, also known as Maya, said the team halted the network to contain the damage and would fix the vulnerability before resuming swaps.