Maya Protocol's $11M Liquidity Crash Leaves Pools Exposed

A liquidity crash on Maya Protocol left pools exposed and caused an estimated $11 million in damage. The attacker still holds 20.8273 BTC, worth around $77,086 at current prices, with no outgoing transactions recorded.

According to public Bitcoin data, the balance was funded on August 18 and has remained unchanged since then. The Maya Protocol founder initially stated that the network had lost approximately 20 BTC, valued at around $1.4 million at the time, plus an additional $300,000 in other assets.

A technical reconstruction by SigIntZero attributed the exploit to six accounting and state-handling flaws in a single transaction, which overwrote outbound state and produced a false missing-transfer signal.

The attacker withdrew approximately 48.87 million CACAO before swapping into assets held by other MAYAChain pools. The pool was impacted by $10.9 million, with about $6.4 million attributed to CACAO repricing and $2.9 million due to arbitrage after the token's price fell.