ME News reports that on August 19 (UTC+8), AaluxxMyth, founder of MAYAChain—a decentralized cross-chain trading protocol built on the Cosmos architecture and similar to THORChain—posted that the protocol appears to have been exploited. Over the past hour, the attacker withdrew approximately 20 BTC (valued at around $1.4 million) and other assets (approximately $300,000). The team has implemented a global pause, and current losses are under control; efforts are underway to patch the vulnerability and restore trading functionality. The attacker exploited six chain-level vulnerabilities in MAYAChain’s Trade Account and outbound processing flow, constructing a single MsgDeposit transaction containing 23 messages that triggered a flawed “theft detection” mechanism. The attacker then injected large amounts of CACAO into low-liquidity pools via an unrestricted penalty subsidy mechanism, followed by liquidity addition and withdrawal operations to extract funds. Approximately 48.87 million CACAO were drained from the Asgard module. The attacker has transferred 20.83 BTC to the Bitcoin address bc1q0hsgwu...y5l646 and currently holds around 8.87 million CACAO. Following the attack, the CACAO price dropped from approximately $0.115 to a low of $0.013—a decline of about 88.7%—before partially recovering. AaluxxMyth stated that the team will attempt to recover the stolen funds, collaborate with arbitrageurs, and pursue other methods to restore lost liquidity. He noted that if the 20 BTC can be reinjected into the liquidity pools, the CACAO price may rebound to around $0.115. The team is still investigating the details of the attack and will continue to provide updates. (Source: BlockBeats)
MAYAChain Suffers Attack, 20.83 BTC and 48.87M CACAO Stolen
KuCoinFlashShare
Summary
MAYAChain, a Cosmos-based cross-chain trading protocol, was hacked on August 19 (UTC+8), with attackers stealing 20.83 BTC and 48.87 million CACAO. The team has halted transactions and is addressing the exploited vulnerabilities. The BTC price dipped slightly during the incident, while the CACAO token fell 88.7%. The attack exploited six chained vulnerabilities in the Trade Account and outbound flow. The Fear & Greed Index has likely shifted toward fear as a result.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.