MAYAChain Exploit Leaves $11 Million in Pool Damage

A recent exploit on the MAYAChain network has left a trail of destruction in its wake. The attacker, who was able to move $1.36 million in hard assets out of the system, triggered a false accounting entry that ultimately led to nearly $11 million in damage across the network's liquidity pools.

The attack began with a 23-message transaction that overwrote earlier state and made legitimate transfers appear as missing. This classification activated theft-detection logic, which calculated an excessive subsidy for an underfunded pool, resulting in an inflated balance of approximately 49.45 million CACAO tokens.

The attacker was then able to add a negligible amount of liquidity to the distorted pool and withdraw nearly 99% of its ownership units, causing the value of the remaining tokens to plummet by 88.7%. The incident has left many wondering what 'recover in full' will mean for the network's liquidity providers.

Founder Aaluxx has promised that the team would fix the incident and recover in full, but as of August 20, no further updates had been published on the progress of the recovery efforts.