Upgrade your plan
Dashboard

Maya Protocol Suffers $1.7 Million Exploit, Draining 48.87 Million CACAO Tokens

Maya Protocol, a cross-chain liquidity platform, experienced a significant exploit on August 18, resulting in the theft of approximately 48.87 million CACAO tokens and 98.82 LINK from its liquidity pools. The direct financial loss from the exploit is estimated at $1.7 million, but the broader impact was severe, with CACAO's price plummeting nearly 89% and the total pool value decreasing by approximately $10.9 million.

The exploit was executed through a complex manipulation of the protocol's internal accounting systems, utilizing six distinct bugs. The attacker orchestrated a single transaction that involved 23 messages, indicating a high level of familiarity with Maya's code. This sophisticated approach allowed the attacker to exploit vulnerabilities in the shared liquidity infrastructure, which is designed for facilitating swaps across multiple blockchains.

In the aftermath of the exploit, Maya Protocol halted operations to prevent further losses and is exploring recovery options, including a potential white-hat bounty offer to the attacker. The price of CACAO has seen a slight recovery to around $0.03, but this still represents a significant decline from pre-exploit levels. The incident has raised concerns about the security of cross-chain protocols, which have been frequently targeted in the past, and may lead to increased scrutiny and caution among investors in the DeFi ecosystem.

Maya's team is now focused on addressing the vulnerabilities and restoring confidence in the protocol. The outcome of their recovery efforts, including the success of the white-hat offer and the implementation of a comprehensive security audit, will be crucial in determining the future viability of Maya Protocol and its ability to regain user trust.

© 2026 KLEA News. All Rights Reserved. This article is provided for informational purposes only. It is not offered or intended to be used as legal, tax, investment, financial, or other advice.

Source: KLEA News

.