The suspected Bitcoin handle on the middle of Maya Protocol’s Aug. 18 exploit nonetheless held about 20.8273 BTC with no outgoing spend on Aug. 21, whereas no printed restoration plan accounted for the a lot bigger estimated influence throughout the cross-chain liquidity protocol’s swimming pools.
Public Bitcoin knowledge confirmed 20.82731228 BTC funded, zero spent, 11 confirmed transactions and none ready within the mempool. Ten preliminary deposits totaling 20.82730682 BTC arrived at 17:32:18 UTC on Aug. 18, whereas a later 546-satoshi transaction raised the full barely. At as we speak’s Bitcoin value, the steadiness was price about $1.59 million.
Maya Protocol founder Aaluxx initially stated the community had probably misplaced about 20 BTC, price roughly $1.4 million on the time, plus about $300,000 in different property. He stated he would work to repair the incident and recuperate in full.
Why changing 20 BTC wouldn’t make swimming pools complete
A technical reconstruction by SigIntZero attributed the exploit to 6 accounting and state-handling flaws chained inside one 23-message transaction. It stated overwritten outbound state produced a false missing-transfer sign, activating a compensation path that credited about 49.45 million CACAO to a skinny ARB.LINK pool regardless that Maya’s reserve held solely about 168,000 CACAO.
The reserve switch failed, however the inflated steadiness endured. After including negligible liquidity, the attacker acquired about 99.93% of the pool’s possession items and withdrew roughly 48.87 million CACAO earlier than swapping into property held by different MAYAChain swimming pools.
SigIntZero estimated that about $1.36 million in property moved to exterior chains and roughly $291,000 remained on MAYAChain, placing whole attacker-controlled worth close to $1.65 million to $1.7 million.
Individually, the pool was impacted by $10.9 million. yourcryptonewstoday evaluation attributed about $6.4 million to CACAO repricing and about $2.9 million to arbitrage after the token fell from roughly $0.115 to $0.013, an 88.7% decline.
Maya reportedly hopes for a bug-bounty return and, failing that, may search to switch roughly 20 BTC by way of Aztec Chain investments and different means. Even when that Bitcoin is returned or changed, it will cowl just one a part of the harm. As of press time, Maya had not publicly outlined which remaining losses it will restore or who would take up the hole created by CACAO’s repricing and trades throughout the dislocation.
