Maya Protocol Hit by $1.7M Exploit, CACAO Falls 89%
Maya Protocol's network was halted after an attacker exploited a series of software flaws to obtain an estimated $1.7 million in crypto. The attacker stole about 20 Bitcoin, valued at $1.4 million, and another $300,000 in assets.
Intelligence analysis by Llama
Maya Protocol's network was halted after an attacker exploited a series of software flaws to obtain an estimated $1.7 million in crypto. The attacker used a single transaction containing 23 messages to trigger a false theft detection, artificially inflate a low-liquidity pool, and withdraw 48.87 million CACAO tokens from Maya's Asgard module.
Imagine a digital bank that lets people trade and store money. A bad guy found a way to trick the system and steal a lot of money. The bank had to stop working to prevent more damage.
Analysis
Exploit Details
A preliminary technical analysis attributed the incident to six chained bugs involving trade accounts, outbound transaction handling, and liquidity pool calculations. The attacker used a single transaction containing 23 messages to trigger a false theft detection, artificially inflate a low-liquidity pool, and withdraw 48.87 million CACAO tokens from Maya's Asgard module.
Impact on CACAO
The analysis estimated that about $1.36 million was transferred to external blockchains, while the attacker retained about $291,000 in CACAO and trade-account positions on MAYAChain. CACAO fell by 88.7%, from approximately $0.115 to $0.013 during the incident.
Wider Impact
The analysis estimated a wider $10.9 million decline in pool value, but said that figure included arbitrage activity and CACAO's devaluation rather than assets stolen solely by the attacker. The incident highlights the importance of robust security measures in decentralized finance (DeFi) protocols to prevent such attacks and protect user assets.
Key points
- Maya Protocol's network was halted after an attacker exploited a series of software flaws to obtain an estimated $1.7 million in crypto.
- The attacker stole about 20 Bitcoin, valued at $1.4 million, and another $300,000 in assets.
- A preliminary technical analysis attributed the incident to six chained bugs involving trade accounts, outbound transaction handling, and liquidity pool calculations.
- CACAO fell by 88.7% during the incident.
- The analysis estimated a wider $10.9 million decline in pool value, but said that figure included arbitrage activity and CACAO's devaluation rather than assets stolen solely by the attacker.
If Maya Protocol can fix the bugs and improve its security measures, it may be able to regain user trust and continue to operate safely.
If the incident is not handled properly, it may lead to a loss of user trust and a decline in the value of CACAO tokens.
