MAYAChain suffered an exploit that moved approximately $1.36 million in hard assets to external chains, including roughly 20.83 BTC. The total impact across the network’s liquidity pools approached nearly $11 million, with the CACAO token collapsing 88.7% from about $0.115 to $0.013. The exploit leveraged a flaw in pool accounting: a DONATE message overwrote ObservedTxVoter state, triggering false theft detection that granted an unbounded subsidy of approximately 49.45 million CACAO to a near-empty pool. As of August 20, Maya Protocol had not yet published a confirmed patch, swap restart date, or compensation terms for liquidity providers, despite founder Aaluxx’s promise to recover in full.
Source: Read the original article
