
Maya Protocol Exploit Drains Assets as Cross-Chain Trading Halts
A chain of six vulnerabilities in Maya Protocol's cross-chain trading system allowed an attacker to drain bitcoin and other assets from shared liquidity pools. The protocol activated a global halt Tuesday as founder Aaluxx pledged to recover funds.
Written by CoinArticle’s AI Newsroom · from 2 cited sources. How we work
The Vulnerability Chain
Maya Protocol suffered an exploit that credited a pool with nearly 50 million tokens that were never properly funded, according to CoinDesk reporting. This chain of six flaws in the cross-chain trading network allowed an attacker to use the phantom balance to drain real assets from the pools, including bitcoin and other cryptocurrencies.
Reported Damage and Response
Estimates of the drain vary between sources. CoinDesk reported the pool value dropped $11 million, while The Defiant reported $1.7 million in losses from shared liquidity. Maya Protocol activated a global halt through routing service LeoDex on Tuesday to prevent further withdrawals.
Founder Aaluxx said in a statement he would work to fix the vulnerability and recover funds in full. No timeline for recovery or detailed postmortem has been announced.
Why It Matters
For Traders
Maya liquidity pools are frozen pending recovery; any open positions or pending swaps are blocked until the protocol resumes.
For Investors
Cross-chain bridge and DEX vulnerabilities remain a structural risk; this incident adds to the case for extensive audits before deploying novel multi-chain architectures.
For Builders
Multi-chain protocols must carefully validate that liquidity is actually funded before crediting it to internal state; the six-flaw chain here suggests inadequate integration testing.
This article is for information only and is not financial advice. Read the full disclaimer.



