An attacker drained roughly $1.7 million from Maya Protocol on August 18 by faking a subsidy inside the ARB.LINK pool’s accounting, then repeatedly adding and removing liquidity to pull out CACAO and LINK tokens. More than 20 BTC tied to the exploit, about $1.34 million, sits unt...