Crypto
Home›Crypto›Market Structure›Maya Protocol exploit drains about $1.7 million from s…
Maya Protocol exploit drains about $1.7 million from shared liquidity
Maya’s team activated a global halt after an attacker drained a liquidity pool, and routing service LeoDex said it will monitor routes before turning them back on later.
Maya Protocol disclosed it was exploited for about $1.7 million tied to shared liquidity, according to blockchain security reporting. The attacker allegedly inflated accounting with a false subsidy, then added and removed liquidity to extract about 48.87 million CACAO and 98.82 LINK, CertiK reported.
A separate third party analysis described a sequence of six bugs. It said an outbound transaction was wrongly marked as missing, triggering a compensation routine that credited a pool with 49 million CACAO despite reserves of 168,000 CACAO; while the transfer failed, the phantom balance remained and the attacker later deposited a small amount and took 99% of the pool, RedStone co-founder Marcin Kazmierczak wrote.
MayaChain is a decentralized cross chain liquidity protocol that allows users to contribute liquidity and swap across it without pegging or wrapping assets. Its documentation says the network observes transactions sent to vaults on supported blockchains and coordinates the corresponding action.
In response to the incident, LeoDex said Maya’s team activated a global halt, and it will monitor the protocol and turn routes back on later. Founder Aaluxx said he would work to fix and recover in full, the outlet said.