[Unified Liquidity Crash Leaves Maya Pools Exposed Despite Attacker Still Holding 20.8 BTC]

Why replacing 20 BTC would not make pools whole

The suspect wallet tied to Maya Protocol’s August 18 exploit retains approximately 20.8273 BTC with no outgoing transfers on August 21, and no published recovery plan accounts for the substantially higher impact anticipated across the cross‑chain liquidity pools.

On‑chain records show the same 20.82731228 BTC held zero transfers since August 21, even though ten initial deposits totalling about 20.82730682 BTC arrived at 17:32:18 UTC on August 18 and a subsequent 546‑satoshi input modestly increased the total. At today’s Bitcoin price the balance translates to roughly $1.59 million.

Founder Aaluxx stated that the protocol may have lost around 20 BTC—so roughly $1.4 million at the time—and about $300 000 in other assets, promising full remediation.

While the reserves were replenished with negligible liquidity, the attacker obtained about 99.93 % of the pool’s ownership shares and withdrew approximately 48.87 million CACAO before converting it into assets held by other MAYAChain pools.

Security analysis estimates that roughly $1.36 million in assets have migrated off‑protocol and about $291 000 remain on MAYAChain, pushing the attacker’s overall exposure toward $1.65–$1.70 million.

Additional $10.9 million affected the pool, with CACAO repricing consuming about $6.4 million and further outflows amounting to $2.9 million after the token dropped sharply, contributing to the total loss.

May A proposes pursuing bug‑bounty rewards and may attempt to substitute the missing cryptocurrency through Aztec Chain investments or comparable avenues, although any recovery would address only a fraction of the damage. Until now, the protocol has not specified precisely which residual losses it must restore or which party would absorb the shortfall caused by CACAO’s repricing and trading disorder.

Source link

Exit mobile version