Summary: Unresolved $11 million liquidity crash leaves pools exposed as attacker still holds 20.83 BTC on Maya Protocol

Published: 1 day and 23 hours ago
Based on article from CryptoSlate

Maya Protocol Grapples with $11 Million Liquidity Crisis After Exploit

Maya Protocol is currently navigating the fallout of a massive liquidity crisis following an August 18 exploit that has left a multi-million dollar hole in its ecosystem. While the attacker remains in possession of roughly 20.83 BTC, the total impact on the protocol’s liquidity pools is estimated at a staggering $10.9 million. As the community awaits a definitive recovery strategy, the discrepancy between the stolen funds and the total damage highlights a complex recovery path ahead for the cross-chain protocol.

The Mechanics of the Exploit

A technical reconstruction of the incident revealed a sophisticated attack involving six chained accounting and state-handling flaws within a single 23-message transaction. A false signal triggered a compensation path that erroneously credited approximately 49.45 million CACAO to a specific liquidity pool, despite the protocol's reserves holding only a fraction of that amount. The attacker leveraged this inflated balance to seize nearly 100% ownership of the pool, subsequently withdrawing the assets and swapping them for various tokens across other MayaChain pools. While the direct value controlled by the attacker is estimated between $1.65 million and $1.7 million, the systemic shock to the protocol was far more severe.

Market Devaluation and Unresolved Losses

The exploit triggered a catastrophic 88.7% price collapse for the CACAO token, which plummeted from $0.115 to just over one cent. This crash resulted in roughly $6.4 million in repricing damage and an additional $2.9 million lost to arbitrage during the market dislocation. Although Maya Protocol’s leadership has suggested replacing the stolen Bitcoin through external investments and potential bug bounty returns, these measures would only address a small portion of the total $10.9 million impact. As of now, the protocol has yet to publish a final ledger or clarify how the massive gap created by CACAO’s devaluation will be absorbed, leaving liquidity providers in a state of uncertainty.

Cookies Policy - Privacy Policy - Terms of Use - © 2025 Altfins, j. s. a.