Maya Protocol has suspended the cross-link network. According to the agreement, the attackers used six software defects in a chain and transferred approximately $1.7 million of assets in a transaction containing 23 messages, involving bitcoin and other coins.
Transferred approximately $1.36 million
Preliminary statistics indicate that approximately $1.36 million of assets have been transferred to the external block chain, while some $291,000 remain in positions controlled by the attackers. The co-founder Aalux stated that the agreement had initiated a global suspension to prevent further losses.
Six defects were used continuously.
According to the preliminary technical analysis, the incident was not triggered by a single loophole, but by the continued use of multiple components. The assailants wrongly triggered the theft detection mechanism of the agreement and then manipulated a less mobile pool of funds.
Following the lifting of the low-mobility pool valuation, the attackers extracted 48.87 million CACAOs from the Maya Asgard module. The Asgard module is responsible for the custody agreement for assets required for cross-chain conversion, and its accounting and liquidation system is a key part of the cross-chain agreement.
CACAO, once down 89%.
According to the preliminary findings of the independent block chain security researcher, Vini Barbosa, CACAO fell from approximately $0.115 to $0.013 during the incident, a decline of 88.7 per cent.
The technical analysis also revealed a decrease of approximately $10.9 million in the total value of the associated mobile pools. This figure, however, is not equivalent to the amount stolen, but also includes the arbitrage effect and the devaluation of the pool assets as a result of the rapid decline of CACAO.
Cross-chain agreements stopped this year several times.
As currently disclosed, the direct outflow system is significantly lower in size, with approximately $1.36 million transferred across the chain and an additional approximately $291,000 remaining in the attackers-controlled hold. Maya Protocol is currently focusing on the rehabilitation of related issues and no specific timetable has been given for the restoration of cross-chain conversion.
Additional information:In May and June this year, THORchain and Axelar also suspended some of their functions because of the risk of a chain-related loophole or connection, indicating that the chain-based infrastructure chain of asset custody and liquidation remained a high-risk area.