MAYAChain suspended network operations after a sophisticated exploit drained an estimated $1.7 million in cryptocurrency, including approximately 20 Bitcoin worth $1.4 million and about $300,000 in other digital assets. The attack reportedly exploited six connected software bugs affecting trading accounts, transaction processing, and liquidity-pool calculations. CACAO, the protocol’s native token, plunged nearly 89% from roughly $0.115 to $0.013, while total liquidity-pool losses reached approximately $10.9 million. Pseudonymous founder Aalux disclosed the incident on Wednesday, confirming the team acted swiftly to suspend operations and is now working on network recovery.
MAYAChain has halted operations following an exploit that stole an estimated $1.7 million, including about 20 Bitcoin valued at $1.4 million and $300,000 in other digital assets. Pseudonymous founder Aalux revealed the attack on Wednesday, stating the team acted swiftly to suspend the protocol.
The exploit involved six connected software bugs affecting trading accounts, transaction processing, and liquidity-pool calculations. According to the initial technical analysis, the hacker sent one transaction containing 23 messages, which triggered false theft detection and allowed manipulation of a low-liquidity pool.
The attacker then manipulated the pool’s price and withdrew 48.87 million CACAO coins from the Asgard module. Approximately $1.36 million in assets were transferred to other blockchain networks, while about $291,000 in CACAO and trade account balances remain on MAYAChain.
Security expert Vini Barbosa reported that CACAO fell 88.7%, dropping from $0.115 to $0.013 in under 240 blocks, calling the event a “sad day” for the project. The price collapse contributed to total liquidity-pool losses of roughly $10.9 million, though investigators said this figure does not represent the amount of funds stolen directly.
The Maya Protocol team continues to keep the system offline while investigating the security issue. According to Aalux, the team will complete technical research and restore swaps once all necessary precautions are in place.
This incident highlights security vulnerabilities facing cross-chain decentralized exchanges due to their operational complexity. MAYAChain‘s next steps involve addressing the identified bugs and validating transaction logic before resuming activity.
