BTC $84,775.26 +0.66%
ETH $2,682.57 +0.59%
BNB $788.25 +2.91%
XRP $1.49 +1.14%
SOL $119.67 +1.41%
TRX $0.3358 +0.24%
DOGE $0.0931 +1.70%
ADA $0.2453 +2.24%
BCH $314.75 +3.58%
LINK $13.95 +2.35%
HYPE $88.96 +2.67%
AAVE $179.53 -0.37%
SUI $1.17 +4.10%
XLM $0.2154 +1.44%
ZEC $1,310.77 +1.38%
AAPL $333.48 -0.07%
AMZN $251.89 +0.38%
GOOGL $343.20 +0.05%
MSFT $517.91 +0.33%
META $729.05 +0.22%
NVDA $234.56 +0.05%
TSLA $370.86 -0.95%
SNDK $1,716.39 -0.16%
INTC $118.01 -1.55%
SPCX $159.07 -0.36%
MU $1,070.69 -0.42%
AMD $633.28 -0.23%
BTC $84,775.26 +0.66%
ETH $2,682.57 +0.59%
BNB $788.25 +2.91%
XRP $1.49 +1.14%
SOL $119.67 +1.41%
TRX $0.3358 +0.24%
DOGE $0.0931 +1.70%
ADA $0.2453 +2.24%
BCH $314.75 +3.58%
LINK $13.95 +2.35%
HYPE $88.96 +2.67%
AAVE $179.53 -0.37%
SUI $1.17 +4.10%
XLM $0.2154 +1.44%
ZEC $1,310.77 +1.38%
AAPL $333.48 -0.07%
AMZN $251.89 +0.38%
GOOGL $343.20 +0.05%
MSFT $517.91 +0.33%
META $729.05 +0.22%
NVDA $234.56 +0.05%
TSLA $370.86 -0.95%
SNDK $1,716.39 -0.16%
INTC $118.01 -1.55%
SPCX $159.07 -0.36%
MU $1,070.69 -0.42%
AMD $633.28 -0.23%

linke

All
Article
Flash

Maya Protocol Attacked: Six Linked Vulnerabilities Result in Approximately $1.7 Million Stolen, Liquidity Pool Shrinks by $11 Million

The cross-chain liquidity protocol Maya Protocol was attacked on August 18, with the attacker exploiting six interconnected software vulnerabilities to create false account balances, stealing approximately 20.83 BTC (about $1.34 million) and other assets, resulting in a total direct loss of about $1.65 million. The incident led to the suspension of trading on the MAYAChain network, with its token CACAO plummeting nearly 89% from $0.115 to $0.013, before recovering to around $0.03.Technical reviews show that the attack began when MAYAChain mistakenly judged a transaction to be lost and triggered a compensation mechanism, but the mechanism miscalculated, adding about 49 million CACAO to a small liquidity pool, while the protocol's reserves only held about 168,000 CACAO. After the transfer failed, the system incorrectly saved the new balance, and the attacker subsequently deposited a very small amount into the liquidity pool, acquiring over 99% of the pool's share and immediately withdrawing 48.87 million CACAO, which was then exchanged for Bitcoin, Ethereum, and other assets.The incident caused the total value of the Maya Protocol liquidity pool to decrease by about $10.9 million, of which approximately $6.4 million was due to the depreciation of CACAO, and about $2.9 million came from arbitrage trading. The team expressed hope that the attacker would return the funds in the form of a bug bounty; otherwise, they would seek to recover losses through investments in channels like Aztec Chain. Maya Protocol has not yet announced a specific time for resuming trading. This incident once again exposed the security risks within the complex logic of DeFi protocols.

Holding 28,600 BTC, worth 1.8 billion USD, the wallet cluster is suspected to be linked to the Zhimin Qian money laundering case

According to on-chain detective Specter, it has discovered a cluster of wallets holding 28,600 BTC, worth approximately $1.8 billion, suspected to be related to wallets previously attributed to the money laundering case of Zhimin Qian.A few weeks ago, a Bitcoin wallet that had been dormant since 2017 transferred 1,020 BTC, worth about $60 million, and began distributing funds to multiple addresses in a manner consistent with money laundering activities. After tracking these transactions, Specter found that the related wallet cluster was connected to publicly associated addresses investigated in the UK concerning Zhimin Qian. From 2014 to 2017, Zhimin Qian organized large-scale investment fraud in China, affecting over 128,000 victims. UK authorities later traced a significant amount of criminal proceeds flowing into Bitcoin, with the Met Police ultimately seizing 60,000 BTC, marking the largest cryptocurrency seizure in UK history at that time.In July 2021, UK authorities transferred the seized BTC, creating identifiable on-chain associations. Following the recent transfer of 1,020 BTC, Specter identified additional wallets, which currently hold a total of 28,600 BTC, worth approximately $1.8 billion. These wallets have largely been dormant since June 2021. Based on on-chain evidence, it remains unclear whether these wallets are still controlled by the same actor, other custodians, or have been identified by law enforcement.
app_icon
ChainCatcher Building the Web3 world with innovations.