MAYAChain halts network after estimated $1.7M exploit
Maya Protocol, a cross-chain DEX, halted its network after an attacker exploited chained software flaws to steal an estimated $1.7 million in crypto. The attack took about 20 Bitcoin worth roughly $1.4 million plus about $300,000 in other assets. The protocol triggered a global pause, said the damage was contained, and began working on a fix to restore swaps. A preliminary analysis said six linked bugs involving trade accounts, outbound transaction handling, and liquidity pool calculations were used in a single transaction with 23 messages. The attacker reportedly caused a false theft alert, inflated a low-liquidity pool, and withdrew 48.87 million CACAO from the Asgard module. About $1.36 million was sent to external blockchains, while about $291,000 remained in CACAO and MAYAChain trade-account positions. CACAO’s price fell 88.7% during the incident.
