Cross-chain protocol Maya suspended operations after an attacker exploited six software flaws to drain roughly $1.7 million in Bitcoin and other cryptocurrencies. The attacker inflated a liquidity pool by 49.45 million CACAO, gained 99.93% control of the pool, and withdrew 48.87 million CACAO before swapping the tokens for Bitcoin. The native CACAO token crashed by nearly 89% while the value of MAYAChain’s liquidity pools fell by approximately $10.9 million. The flaws had gone undetected for three to four years despite audits by Halborn and Fable 5. The team published the suspected attacker’s Bitcoin address, which received 20.83 BTC worth about $1.34 million, and hopes to recover the funds through a bug bounty.
Source: Read the original article
