A suspected Bitcoin address linked to Maya Protocol’s Aug. 18 exploit still held 20.82731228 BTC on Aug. 21, with 11 confirmed transactions and no outgoing spend or pending mempool transactions. The balance was worth about $1.59 million at the current Bitcoin price. Founder Aaluxx initially estimated losses at about 20 BTC, worth roughly $1.4 million at the time, plus $300,000 in other assets, and said he would seek full recovery. A SigIntZero reconstruction attributed the exploit to six accounting and state-handling flaws executed in one 23-message transaction, allowing an attacker to create an inflated CACAO balance, take about 99.93% of a thin ARB.LINK pool and withdraw roughly 48.87 million CACAO. About $1.36 million moved to external chains and roughly $291,000 remained on MAYAChain, while total attacker-controlled value was estimated at $1.65 million to $1.7 million. Separately, the pool suffered an estimated $10.9 million impact, including about $6.4 million from CACAO repricing and $2.9 million from arbitrage after the token fell 88.7%, from roughly $0.115 to $0.013. Maya reportedly hopes to recover funds through a bug bounty or replace about 20 BTC through Aztec Chain investments and other means, but has not publicly specified which remaining losses it would restore or who would absorb the gap caused by CACAO’s repricing and related trades.