Key Takeaways
- A vulnerability in the Butter Network cross-chain bridge allowed an attacker to mint a quadrillion MAPO tokens, destroying the token’s value.
- The unauthorized minting significantly inflated the supply, causing a 96% price drop in just a few hours.
- The Map Protocol team has paused its network and is planning a migration to a new contract to recover from the breach.
Technical Failure Leads to Massive Inflation
A security breach involving the Butter Network cross-chain bridge resulted in a near-total loss of value for the MAPO token. The attacker successfully executed a malicious contract deployment that tricked the bridge into validating fake transaction data.
This allowed the attacker to mint a quadrillion tokens, a volume thousands of times greater than the intended total supply. This massive influx of tokens flooded decentralized exchanges, enabling the attacker to drain liquidity pools of ETH before the project could take evasive action. The incident has left the token trading at a tiny fraction of its original price.
Security Measures and Network Recovery
In response, the project leadership has paused all mainnet activity to investigate the Solidity contract vulnerability that enabled the exploit. The team clarified that while the liquidity pools were drained, they are working on a recovery plan that involves a token snapshot and a transition to a brand-new contract address.
Any tokens currently held in the hacker’s possession will be excluded from the new asset distribution. This attack joins a growing list of bridge compromises in May, highlighting a critical need for more robust validation processes in cross-chain communication.
Final Thoughts
The Map Protocol incident serves as a critical warning regarding the complexity of cross-chain bridges. Standard Solidity practices must be bolstered to prevent these types of catastrophic minting vulnerabilities.
Frequently Asked Questions
How did the attacker mint so many tokens?
They exploited a validation flaw in the cross-chain bridge to create fake transaction hashes.
What is the current status of MAPO?
The protocol has paused the mainnet, and the team is preparing a migration to a new token contract.
Are user funds safe?
Most liquidity was drained from pools during the attack, but the team aims to invalidate the hacker’s supply in the upcoming migration.