A preliminary evaluation says six chained bugs let a 23-message transaction drain 48.87 million CACAO, sending the token down practically 89%.
Cross-chain decentralized change (DEX) Maya Protocol halted its community after an attacker exploited a sequence of software program flaws to acquire an estimated $1.7 million in crypto.
On Wednesday, Maya Protocol’s pseudonymous co-founder Aalux mentioned the attacker stole about 20 Bitcoin, valued at $1.4 million and one other $300,000 in property. He mentioned the protocol carried out a world halt, contained additional harm and began engaged on a repair to renew swaps.
A preliminary technical evaluation shared by Aalux attributed the incident to 6 chained bugs involving commerce accounts, outbound transaction dealing with and liquidity pool calculations. It mentioned the attacker used a single transaction containing 23 messages to set off a false theft detection, artificially inflate a low-liquidity pool and withdraw 48.87 million CACAO tokens from Maya’s Asgard module.
Learn extra