Maya Protocol was exploited for approximately $1.7 million after an attacker inflated accounting with a false subsidy, then added and removed liquidity to extract about 48.87 million CACAO and 98.82 LINK. Blockchain security firm CertiK confirmed the assets came from shared liquidity. RedStone co-founder Marcin Kazmierczak described six bugs acting in sequence: an outbound transaction was wrongly marked as missing, triggering a compensation routine that credited a pool with 49 million CACAO despite reserves of 168,000 CACAO. The transfer failed but the phantom balance remained, allowing the attacker to deposit a small amount and withdraw 99% of the pool. Maya Protocol founder Aaluxx confirmed the team activated a global halt and would work to fix and recover in full.
Source: Read the original article
