MAYAChain Exploit Causes $11 Million in Pool Damage

MAYAChain's $1.36 million exploit has caused nearly $11 million in damage to its network's liquidity pools, according to a detailed analysis by independent researcher Vini Barbosa.

The attack occurred when an attacker moved about $1.36 million in hard assets, including 20.83 BTC, to external chains, while the estimated impact across the network's liquidity pools approached $11 million.

The exploit created a false balance in one of the network's paired liquidity pools, allowing the attacker to withdraw approximately 48.87 million CACAO tokens, and resulting in an 88.7% drop in the token's price from around $0.115 to $0.013.

Fundamental founder Aaluxx stated that the team would 'recover in full,' but as of August 20th, Maya's official channels had yet to publish a confirmed swap restart, patch deployed on mainnet, asset recovery total, final loss allocation, or comprehensive compensation terms for liquidity providers.

The attack depended on several conditions aligning across transaction state, outbound matching, subsidy calculations, pool-state ordering, and rollback behavior. Public documentation as of press time did not demonstrate that THORChain carries the same complete path.