Maya Protocol halted MAYAChain globally on Aug. 19, 2026, after an exploit moved about $1.36 million in hard assets, including roughly 20.83 BTC, while CACAO's 88.7% collapse and distorted pool accounting pushed estimated network-wide damage close to $11 million. Independent researcher Vini Barbosa said a 23-message MsgDeposit transaction overwrote ObservedTxVoter state, causing legitimate transfers to be classified as missing and triggering an excessive subsidy of about 49.45 million CACAO against reserves holding roughly 168,000 CACAO. Although the transfer failed, the inflated balance remained committed; the attacker then acquired about 99.93% of the affected pool and withdrew roughly 48.87 million CACAO. As of Aug. 20 reporting, Maya had not confirmed a mainnet patch, swap restart, recovered-asset total, final loss allocation or comprehensive compensation terms.