Maya Protocol stopped its network after attackers exploited six chained vulnerabilities to steal $1.7 million in assets, including 20 bitcoin and $300,000 in other tokens, according to founder Aalux.
The exploit exposed a cascade of interconnected bugs in the protocol's code. Attackers were able to chain the vulnerabilities together in a single transaction, draining liquidity pool reserves before the team could respond. Maya, a decentralized exchange protocol built on the Bitcoin network, is now working on a fix and has not yet resumed operations.
Maya operates as a constant product market maker similar to Uniswap, allowing users to swap assets through liquidity pools. The protocol had accumulated approximately $11 million in total value locked before the attack, according to on-chain tracking. The theft represents roughly 15 percent of the platform's TVL at the time of the exploit.
Aalux disclosed the breach on August 18 in a statement on X detailing the attack vector. The founder said the team identified all six bugs and is working to patch them before restoring the network. Maya had been operational since 2024 and had attracted users seeking Bitcoin-native decentralized finance products.
Curve Finance suffered a $52 million loss in June 2023 from an attack that exploited interactions between multiple contract functions. Similar chained-bug exploits have become more common as protocols grow in complexity and attackers develop more sophisticated techniques to bypass individual safeguards.
Many blue-chip protocols now require formal verification tools that simulate transaction flows across multiple contract states before deployment. The timeframe for Maya's return remains unclear; the team has not published a timeline for resuming trading or restoring user positions.
The number that will determine whether Maya recovers user confidence is the percentage of liquidity that returns after it restarts. If deposits fall below 30 percent of pre-attack levels within 30 days of reopening, the protocol may struggle to regain its user base given the number of alternative Bitcoin DeFi platforms now available.
