Maya Protocol exploited via six software vulnerabilities, resulting in $1.4M Bitcoin theft and network halt.
Security & Exploits ·
Maya Protocol halted its network Tuesday after attackers exploited six software vulnerabilities to drain approximately $1.7 million in Bitcoin and other assets, according to a post-mortem analysis. The attack involved a single transaction that inflated a liquidity pool by roughly 49.45 million CACAO tokens, allowing the attacker to gain control and withdraw assets that were subsequently converted to Bitcoin and moved across blockchains. CACAO's price fell nearly 89% as the total value of MAYAChain's liquidity pools declined by roughly $10.9 million. The protocol's team said the bugs had evaded detection for three to four years despite audits and plans to recover the stolen Bitcoin through investments and alternative means.