Maya Protocol has become the latest DeFi platform hit by a security exploit, with an attacker draining value from its liquidity pools. This Maya Protocol hack news roundup covers what happened, how the crypto hack worked, and the team's recovery response. The breach triggered an emergency halt and sent the protocol's native token sharply lower before a partial rebound began.
The incident struck the MAYAChain mainnet around 17:30 UTC on August 18, 2026. The attacker's confirmed extraction to external chains totaled roughly $1.36 million, while total attacker value — including funds still held on-chain — approaches $1.7 million. Stolen assets included Bitcoin, ARB-based tokens, and native CACAO. The team immediately halted network operations to limit further losses while working on a fix.
The attacker's confirmed haul was largely 20.83 BTC, worth approximately $1.34 million, sent to a single Bitcoin address. Separately, the attacker still holds around 8.87 million CACAO on-chain, worth roughly $288,000 at depressed prices — funds that could potentially be frozen. Additional losses tied to arbitrage trading during the crash are distinct from what the attacker personally extracted.
Rather than a single flaw, this breach stemmed from six chained bugs. It began with a batched deposit transaction whose many internal messages caused the system to overwrite tracking records tied to one transaction ID.
That clobbering effect led the outbound-verification logic to miss where funds had actually gone, mistakenly flagging a legitimate transfer as theft. The false alarm triggered a slashing calculation with no proper cap, wildly inflating the CACAO balance of a low-liquidity pool.
That inflated state was saved before the system attempted to fund it — and when the funding transfer failed, the error was logged but never rolled back, leaving the inflated balance intact. The attacker then added minimal liquidity to this fattened pool, instantly gaining near-total ownership, and withdrew the inflated value.
Time / Block | Event | Impact |
Aug. 18, ~17:30 UTC (block 17977941) | 23-message exploit transaction executed | Six-bug chain triggered |
Block 17977971 | Attacker adds and withdraws liquidity from inflated pool | ~48.87M CACAO extracted |
Blocks 17977998–17978008 | CACAO rapidly swapped into BTC | 20.83 BTC moved off-chain |
Block 17978094 | CACAO bottoms out | Roughly 88.7% down from pre-exploit levels |
Block 17978500+ | Partial recovery begins | CACAO climbs back toward $0.03 |
CACAO token price collapsed from around $0.115 to roughly $0.013 as the exploited funds were swapped into other assets, before partially recovering to the $0.03 range. Independent arbitrage traders capitalized on the price dislocation, extracting further value from the pools — but this was a downstream market reaction, not part of the original exploit.
Maya Protocol Halts Trading and Launches Recovery Efforts
The team moved quickly to implement a global crypto trading halt, pausing token swaps while engineers worked to identify and patch the vulnerability. Founder AaluxxMyth publicly acknowledged the incident and pledged to recover losses in full. An offer was also extended to the attacker: disclose the vulnerability publicly in exchange for a white-hat bounty and return of the stolen funds.
Separately from the immediate response, AaluxxMyth signaled plans to accelerate the launch of Aztec Chain, described as a next-generation omnichain DeFi platform built on lessons from Maya, THORChain, and Rujira. Part of any capital raised would reportedly be directed back into Maya's pools to help offset losses — a longer-term funding strategy rather than an immediate fix.
Recovery options reportedly include freezing the attacker's remaining CACAO, pursuing recovery of the extracted BTC, and restoring pool liquidity through fresh capital or asset re-injection.
A more drastic chain-state rollback has also been floated, though it would require validator coordination and carries trade-offs for legitimate transactions made after the exploit.
Notably, the founder stated the exploited bugs went undetected through prior Halborn and Fable 5 security audits. Going forward, watch for the resumption of trading, movement of the attacker's remaining funds, Maya Protocol price recovery, and governance decisions on further security measures.
The Maya Protocol hack underscores how even audited DeFi protocols remain exposed to complex, multi-step exploits. As the team pushes forward with fixes and recovery plans, users should follow official channels for updates rather than secondhand reports.
Disclaimer: This article is for informational purposes only and does not constitute financial advice. Cryptocurrency investments carry significant risk; always conduct your own research before making investment decisions.
