AaluxxMyth, Maya Protocol’s founder, said the protocol was exploited. About 20 BTC, near $1.4 million, and about $300,000 in other assets. That is the $1.7 million print. The team put on a global halt. Swaps are off while they work a fix.
This is a halt. It is not a bitcoin tape.
A domain-phishing drain is already live: 1,010 ETH after a bookmark hit expired tornado.cash.
What the founder locked. What the recaps added.
Aaluxx posted the Discord note, then on X early Wednesday: “Will work to fix and recover in full.” CertiK Pulse repeated the same $1.7 million founder line.
| Print |
Source |
| ~20 BTC (~$1.4 million) plus ~$300,000 other assets |
AaluxxMyth Discord / X |
| Global halt |
same |
| ~48.87 million CACAO from the Asgard module |
BlockBeats and desk recaps of the team analysis |
| 20.83 BTC to bc1q0hsgwunccczelq05ucpmfz268eyy5jr2y5l646 |
founder Discord, Blockchair link |
| ~8.87 million CACAO still on-chain |
desk recaps |
| Recovery target |
donate 20 BTC back; CACAO toward $0.115 |
A 98.82 LINK drain is circulating with CertiK’s name. It is not on the founder Discord I have, and not on the CertiK Pulse item. It is not in this table.
DeFiLlama, on the snapshot used here: TVL $3.39 million. On 18 August the pane showed TVL $5.58 million and fees $191,505.
Recovery is a plan, not a return
Aaluxx said a large part of the damage sat in extreme slippage, absorbed by arbitrage and pool fees. The team hopes the attacker takes a bounty and sends the coins back. If not, the founder said they would try to refill the $1.4 million through Aztec Chain investments and other means, then put 20 BTC back in the pool.
That is a target. The coins are not back.
No partner, no award date, no resumed-swap stamp.
Live bitcoin is on bitcoin.
Informational only. Not trading advice, signals, or a guarantee of any market outcome.
Written and fact-checked with AI assistance, reviewed by a human editor before publication.
