MAP Protocol’s Butter Bridge suffered a severe exploit on May 20, 2026, with attackers minting 1,000,000,000,000,000 MAPO tokens, roughly 4.8 million times the legitimate circulating supply of approximately 208 million.
The MAP Protocol token has fallen over nearly 30% in the immediate aftermath.
MAP Protocol Hit by 1 Quadrillion Token Mint
Security firms PeckShield raised immediate alarms, highlighting a vulnerability in Butter Bridge V3.1’s OmniServiceProxy contract that allowed unauthorized minting on Ethereum and BSC.
Follow us on X to get the latest news as it happens
The attacker triggered the mint via a spoofed cross-chain message on the Butter Bridge, directing 1 quadrillion MAPO from the zero address to wallet address 0x40592025392BD7d7463711c6E82Ed34241B64279.
On-chain data shows the exploiter swapped portions of the fake supply, extracting approximately 52.2 ETH (~$110,000) and pulling over $180,000 in liquidity from Uniswap pools before the price collapsed.
Most of the inflated tokens remain in the attacker’s wallet.
This incident adds to a troubling 2026 trend: PeckShield has tracked multiple bridge exploits draining hundreds of millions across DeFi this year.
Market Impact: MAPO Price Crashes
MAPO, the native token of the Bitcoin Layer-2 and omnichain interoperability project, traded around $0.003 prior to the attack. The massive dilution triggered sharp sell-offs and liquidity evaporation.
As of this writing, MAPO traded for $0.001558, down almost 30% following the incident.
Holders and liquidity providers faced immediate losses as trading pairs destabilized.
MAP Protocol positions itself as a secure infrastructure for BTC, stablecoins, and tokenized assets using light clients and MPC-based verification.
The bridge flaw exposed gaps in message validation despite these safeguards.
The project team has not yet issued a formal statement on mitigation steps, such as contract pauses, token blacklisting, or supply adjustments.
Investors should avoid interacting with MAPO pools or the affected bridges until official updates emerge.
This event highlights persistent risks in cross-chain infrastructure. As bridge exploits continue in 2026, users and protocols must prioritize audited verification layers and rapid response mechanisms.