A Maya Protocol exploit has drained bitcoin and other assets from the cross-chain trading network, sending its CACAO token down about 88% and cutting the affected pool’s value by roughly $11 million.

The attacker chained six bugs on MAYAChain to credit a pool with 48.87 million CACAO that were never funded, then withdrew real assets from the Asgard module in a single transaction. The confirmed haul reached about $1.7 million, mostly 20.83 BTC (~$1.34 million) moved off-chain. Maya's automated halt then paused trading for around an hour, freezing deposits and withdrawals.

It is Maya's first major breach since 2023. Co-founder Aaluxx said the team would patch the vulnerabilities and restore liquidity in full once the network was globally paused.

Get Your Instant BTC Cashback | Your Gateway To Crypto | Arcus Private Whitelist