coin-img-ETHETH+0.94%coin-img-SOLSOL+2.02%coin-img-BTCBTC+0.30%coin-img-USDCUSDC-0.01%coin-img-XRPXRP+0.90%coin-img-HYPEHYPE-1.55%coin-img-TRXTRX+0.36%coin-img-GRAMTONGRAMTON+0.45%coin-img-ETHETH+0.94%coin-img-SOLSOL+2.02%coin-img-BTCBTC+0.30%coin-img-USDCUSDC-0.01%coin-img-XRPXRP+0.90%coin-img-HYPEHYPE-1.55%coin-img-TRXTRX+0.36%coin-img-GRAMTONGRAMTON+0.45%coin-img-ETHETH+0.94%coin-img-SOLSOL+2.02%coin-img-BTCBTC+0.30%coin-img-USDCUSDC-0.01%coin-img-XRPXRP+0.90%coin-img-HYPEHYPE-1.55%coin-img-TRXTRX+0.36%coin-img-GRAMTONGRAMTON+0.45%coin-img-ETHETH+0.94%coin-img-SOLSOL+2.02%coin-img-BTCBTC+0.30%coin-img-USDCUSDC-0.01%coin-img-XRPXRP+0.90%coin-img-HYPEHYPE-1.55%coin-img-TRXTRX+0.36%coin-img-GRAMTONGRAMTON+0.45%

MAYAChain Hit by Exploit; 20.83 BTC and 48.87M CACAO Drained

AI Market Summary
MAYAChain reported an exploit affecting its cross-chain trading and liquidity infrastructure, prompting a global pause while patches are developed. The attacker withdrew ~20.83 BTC and drained ~48.87M CACAO via weaknesses in trade accounts and outbound processing, amplifying losses through low-liquidity pool manipulation. The incident heightens counterparty and smart-contract risk across connected venues and may weigh on risk appetite for similar cross-chain protocols near term.
Impact level
● Medium
Affected assets
BTC/USDT+0.43%
AI Insight · BTC/USDTAI Insight
▼ Bearish
Trade now
⚠️ AI-generated insights are based on news content and are provided for informational purposes only. They do not constitute investment advice or represent the views of BingX. Investing involves risk. Please trade responsibly.
MAYAChain, a Cosmos-based decentralized cross-chain trading protocol similar to THORChain, appears to have suffered an exploit, according to a post by founder AaluxxMyth on Aug. 19 (UTC+8). The attacker withdrew roughly 20 BTC (about $1.4 million) plus additional assets worth around $300,000 within the past hour. The team has initiated a global pause, says losses are currently contained, and is working to patch the vulnerability and restore trading. AaluxxMyth said the exploit involved six chain-level vulnerabilities across MAYAChain's Trade Account and outbound processing flow. The attacker crafted a single MsgDeposit transaction containing 23 messages, triggering a faulty "theft detection" mechanism. The attacker then funneled large amounts of CACAO into low-liquidity pools through an unrestricted penalty-subsidy mechanism, followed by liquidity adds and withdrawals to extract funds. About 48.87 million CACAO was drained from the Asgard module. The attacker moved 20.83 BTC to Bitcoin address bc1q0hsgwu...y5l646 and is said to still hold around 8.87 million CACAO. After the incident, CACAO fell from around $0.115 to as low as $0.013, a drop of roughly 88.7%, before rebounding partially. AaluxxMyth said the team will attempt to recover the stolen funds, coordinate with arbitrageurs, and explore additional measures to restore lost liquidity. He added that if the 20 BTC can be reintroduced into liquidity pools, CACAO could rebound to about $0.115. The team continues to investigate and will provide further updates. Source: BlockBeats.
Selected
BTC
BTC+0.43%
Disclaimer: The content above is only the author's opinion and does not represent BingX’s stance. It shall not be construed as investment advice from BingX. For details, refer to the Terms and Conditions.

Risk Warning

Cryptocurrencies and their derivatives are innovative financial products with great volatility and high investment risks.

Although BingX is committed to providing users with easy-to-use trading tools, trading itself is still a highly sophisticated field. Trading digital assets and their derivatives are subject to high market risk and price volatility and may result in partial or total loss of account funds. You must carefully consider and exercise clear judgment to evaluate your financial situation and the aforementioned risks before using BingX Services. You shall be responsible for all losses arising therefrom. If necessary, please consult relevant professionals to make informed decisions before investing. By accessing, downloading, using or clicking on "I agree" to accept any BingX Services provided by BingX, you agree that you have read, understood and accepted all of the terms and conditions stipulated in BingX Terms of Use as well as our Privacy Policy.


Trading by copying or replicating the trades of other traders involves a high level of risks, even when copying or replicating the top-performing traders. Past performance of a BingX community member is not a reliable indicator of his future performance. Content on BingX's trading platform is generated by members of its community and does not contain advice or recommendations by or on behalf of BingX.