Uniswap

Echo Protocol

Verus

Butter

MAPO, the native token of the Map Protocol, fell 96% on Wednesday after an exploit of the Butter Network cross-chain bridge, which allowed an attacker to mint a quadrillion MAPO tokens.
The malicious mint was tens of thousands of times larger than the legitimate supply of tokens, sending the value of MAPO from around $0.003 to $0.0001 in a matter of hours, <a href="https://www.coingecko.com/en/coins/map-protocol" rel="noopener noreferrer nofollow">according</a> to CoinGecko.&nbsp;
The attacker used a new externally-owned account (EOA) to dump around a billion MAPO tokens, draining about 52 ETH, worth about $180,000, from Uniswap liquidity pools while retaining nearly a trillion tokens that continue to threaten other pools and potential exchange listings, <a href="https://x.com/blockaid_/status/2057137997515014211" rel="noopener noreferrer nofollow">reported</a> Blockaid on Wednesday.
This latest exploit comes during a month in which at least 18 DeFi and blockchain <a href="https://cointelegraph.com/news/12-crypto-protocol-entities-attacked-since-drift-exploit" rel="noopener noreferrer nofollow">protocols have been compromised</a>, including THORChain, Verus Protocol’s Ethereum bridge, Transit Finance, TrustedVolumes, Ekubo, <a href="https://cointelegraph.com/news/echo-protocols-ebtc-exploited-for-76m-in-admin-key-compromise" rel="noopener noreferrer nofollow">Echo Protocol</a> and RetoSwap.&nbsp;
Map Protocol <a href="https://x.com/MapProtocol/status/2057165370117808231" rel="noopener noreferrer nofollow">said</a> the bug was in the Solidity contract layer, and it has paused the mainnet and has begun migration while the investigation continues. The Butter Network said it has paused ButterSwap, adding that user funds were not at risk.&nbsp;
In its latest post, the Map Protocol project <a href="https://x.com/MapProtocol/status/2057284292301221979" rel="noopener noreferrer nofollow">said</a> it would announce a new contract address and select an appropriate time to conduct an asset snapshot. “Any remaining tokens held by attacker-controlled addresses will be fully invalidated and will not be included in any future snapshot or conversion process,” it said.&nbsp;
<img alt="Map Protocol token plummets 96% after a quadrillion token mint exploit" height="596" src="https://s3-images.ctmedia.io/media/content/pasted-image-124.jpeg" width="1376">A billion MAPO tokens were sent to Uniswap after a quadrillion tokens were minted. Source:<a href="https://etherscan.io/token/0x66D79B8f60ec93Bfce0b56F5Ac14A2714E509a99?a=0x40592025392bd7d7463711c6e82ed34241b64279#transactions" rel="noopener noreferrer nofollow">Etherscan</a>
The MAPO <a href="https://cointelegraph.com/news/hackers-used-ai-craft-zero-day-attack-bypass-2fa" rel="noopener noreferrer nofollow">attacker</a> first sent a legitimate oracle multisig-signed message before deploying a malicious contract at a specific address. The attacker then resent a modified “retry” message that appeared identical in hash but was actually fake. The cross-chain bridge verified it as valid and executed the massive token mint.
No private keys were stolen, and no light clients were broken; it was a classic Solidity vulnerability involving multiple dynamic fields, <a href="https://x.com/blockaid_/status/2057158375293530290" rel="noopener noreferrer nofollow">Blockaid</a> explained.&nbsp;
Related: <a href="https://cointelegraph.com/news/github-warns-of-unauthorized-access-to-internal-repositories" rel="noopener noreferrer nofollow">GitHub investigates unauthorized access to internal repositories</a>
Map Protocol is an omnichain network for swapping Bitcoin, stablecoins and tokenized assets across blockchains, connecting the Bitcoin mainnet with ecosystems such as Ethereum, BNB Chain, Tron and Solana.
<h2 id="ton-tac-issues-a-post-mortem-for-2-7-million-exploit">TON-TAC issues a post-mortem for $2.7 million exploit&nbsp;</h2>
Meanwhile, the TON-TAC asset bridge, a cross-chain bridge designed as a network extension for The Open Network, <a href="https://x.com/tacbuild/status/2057183258908238315" rel="noopener noreferrer nofollow">issued</a> a post-mortem on Thursday detailing its $2.68 million exploit that occurred on May 11.
It adds to a wave of cross-chain bridge exploits over the past few weeks, including the Verus-Ethereum Bridge, Echo Bridge, and Butter Network’s cross-chain bridge.&nbsp;
The “security incident” stemmed from missing validation in the sequencer software, which accepted a counterfeit wallet on TON that lacked proper code-hash and minter checks, leading to another unauthorized token mint.&nbsp;
Recovery efforts secured about 80% of the affected assets, but the bridge remains paused for an independent audit of the patched sequencer and liquidity restoration, it added.
Magazine: <a href="https://cointelegraph-magazine.com/defis-billion-dollar-secret-the-insiders-responsible-for-hacks/" rel="noopener noreferrer nofollow">DeFi’s billion-dollar secret: The insiders responsible for hacks</a>

Map Protocol token plummets 96% after a quadrillion token mint exploit

Table of Contents

Cointelegraph

Other articles published on May 21, 2026

Join our free newsletter for daily crypto updates!