Digital Asset
Intelligence
Security Incident

Maya Protocol Smart Contract Vulnerability: $1.70M Reported Loss

·Historical incident record

Incident Overview

Maya Protocol (MAYAChain) suffered a security vulnerability attack. The attacker exploited 6 chained edge-case bugs in Trade Account, outbound handling, and pool math, inflating accounting via false subsidy (e.g., ARB.LINK pool), then added/removed liquidity to extract ~48.87M CACAO and convert to ~20.83 BTC plus other assets, causing ~$1.7 million loss. The team paused global operations to fix the issues and seeks fund recovery.

Sources & References

Original incident referencehttps://x.com/AaluxxMyth/status/2089792721086996703 (opens in a new tab)

This record presents information attributed to the linked sources. Incident dates describe the original event, not a new report. Reported loss figures reflect the source record and are not current market valuations.

More Security Incidents

View All →
  1. Incident date
    Target

    BounceBit

    Attack methodSmart Contract Vulnerability
    Reported loss$ 3,000,000
  2. Incident date
    Target

    FoxMarket

    Attack methodFlash Loan Attack
    Reported loss$ 118,700
  3. Incident date
    Attack methodSmart Contract Vulnerability
    Reported loss$ 10,000
  4. Incident date
    Target

    $TENDRIL

    Attack methodSmart Contract Vulnerability
    Reported loss$ 555000
  5. Incident date
    Attack methodUnknown
    Reported lossNot disclosed