Six-Flaw Exploit Hits Maya Protocol for $1.7M

The Maya Protocol suffered a significant security breach after an attacker exploited six linked software flaws. The incident occurred on August 18, resulting in approximately $1.7 million in losses for the protocol.

Aalux, co-founder of Maya Protocol, stated that the team detected the exploit and immediately implemented a global halt to prevent further damage. The team then began working on fixes and recovery efforts.

The attacker manipulated pool accounting by exploiting several weaknesses, including batched deposit messages overwriting an ObservedTxVoter record and incorrect valuation calculations for low-liquidity pools. This allowed the attacker to extract approximately $1.36 million in assets from external blockchains.