The cross-chain decentralized exchange network Maya Protocol ground to a halt on August 19, 2026. An exploit had just drained an estimated $1.7 million in assets from the platform. Pseudonymous co-founder Aalux confirmed that the hacker stole approximately 20 BTC, valued at $1.4 million, along with other crypto assets worth $300,000.
The market immediately responded to the hack with panic. The price of the network’s native token, CACAO, fell sharply within minutes. The price plunged 88.7%, dropping from an initial price of $0.115 to the $0.013 level during the incident.
Single Transaction Exploits Six Bugs
The attack exploited a stack of vulnerabilities within the system. Initial technical analysis identified six chained bugs that were exploited sequentially without interruption. These security flaws resided in the trade accounts, outbound transaction handling mechanism, and liquidity pool calculation functions.
The attacker manipulated the system through a single transaction containing 23 separate messages. This transaction triggered a false theft detection to deceive the network, then inflated the value of low-liquidity pools with artificial valuations. This vulnerability paved the way for the hacker to withdraw 48.87 million CACAO tokens directly from MAYAChain’s Asgard module.
Where Did the Funds End Up?
Most of the stolen funds have already left the Maya Protocol ecosystem. Out of the total loot, $1.36 million was directly transferred to external blockchain networks. The attacker then left the remaining funds of around $291,000 in CACAO tokens, holding them in a trade account position on MAYAChain.
The financial impact of the attack extends beyond the value of the stolen assets. Independent blockchain security analyst Vini Barbosa summarized findings showing the domino effect of the incident. Chained arbitrage activity and the collapse of CACAO’s value triggered a drop in the total value of liquidity pools, reaching an estimated $10.9 million.
Exchange Engine Forcefully Halted
The protocol team took emergency measures by implementing a global network halt shortly after the incident. This action cut off the attacker’s access to drain more assets from the remaining pools and prevented further damage.
Developers are now working on a code patch to resume cross-chain asset exchange operations. This incident serves as a reminder to the crypto community that a single transaction by a hacker can leverage a stack of minor bugs into a fatal incident for a decentralized exchange.
Reported by Cointelegraph.
Disclaimer: This article is for informational and educational purposes only, not financial advice. Cryptocurrency assets are highly volatile and carry significant risk. Always do your own research (DYOR) and never invest more than you can afford to lose.
