MAYACHAIN’S BRIDGE BREAKS WIDE OPEN — SIX BUGS, ONE FAKE ALARM, $1.7 MILLION GONE.

Nobody broke Bitcoin here. Nobody cracked a key or rewrote a block. What broke was MAYAChain, a piece of software built to carry bitcoin and other coins across different blockchains — call it a bridge, a stack of promises balanced on top of each other. An attacker found six weak spots in those promises and needed just one clever move to walk through all of them: a single fake transaction that tricked the system into thinking a theft had already happened. That triggered a backup fund meant to cover losses, which inflated a thin pool of coins, which the attacker then drained for real money. Twenty bitcoin and change — about $1.7 million total, by Decrypt’s count — gone in minutes, and the network’s own token, CACAO, lost almost 90% of its value trying to absorb the hit. This is the trade every bridge makes and rarely explains: the second your coin leaves Bitcoin’s own ledger and starts living inside someone else’s contract, you’re not trusting math anymore, you’re trusting whoever wrote that contract and every bug they missed. Bitcoin’s base layer never blinked through any of this. The bridge did. A coin is only as safe as the code holding the door.