Maya Protocol Network Halted Following $1.7 Million Exploit

Maya Protocol has suspended its network after suffering a $1.7 million exploit.

The attack, which involved a chain of bugs in trade accounts, outbound transaction processing, and liquidity pool calculations, allowed the attacker to withdraw 48.87 million CACAO tokens from Maya's Asgard module.

Aalux's preliminary technical analysis found that the attacker combined six separate flaws instead of relying on a single vulnerability, triggering an incorrect theft-detection mechanism before manipulating a low-liquidity pool.

As a result, approximately $1.36 million in assets were moved to external blockchains and around $291,000 remained under the attacker's control through CACAO holdings and trade-account positions on MAYAChain.