Maya Protocol just got exploited for the first time since launch in 2023.
Attacker chained 6 bugs in a single tx with 23 sub-commands, draining funds directly from the Asgard module.
Confirmed loss: 20.83 $BTC moved to one wallet. Another $288K in $CACAO still stuck on-chain—team says they might freeze it.
$CACAO dumped 88.7% before partial recovery.
This is a THORChain fork btw. Same codebase, same risks.
Attacker chained 6 bugs in a single tx with 23 sub-commands, draining funds directly from the Asgard module.
Confirmed loss: 20.83 $BTC moved to one wallet. Another $288K in $CACAO still stuck on-chain—team says they might freeze it.
$CACAO dumped 88.7% before partial recovery.
This is a THORChain fork btw. Same codebase, same risks.