Overview
- A flaw in Butter Bridge v3.1 allowed an attacker to create 1,000,000,000,000,000 MAPO tokens, far exceeding the legitimate supply and inflating the token on-chain.
- The mint triggered a rapid market crash that pushed MAPO about 96% lower and cut its market capitalization to below $1 million.
- On Wednesday Map Protocol halted conversions between the Ethereum ERC-20 MAPO and the MAPO mainnet and paused the mainnet while it investigates.
- The attacker sold a small portion of the fake supply and extracted roughly 52 ETH, while most of the minted tokens remain in attacker-controlled wallets and create a persistent supply overhang.
- Map Protocol is migrating to a new contract address and says it will run an asset snapshot to exclude attacker-held balances, a common but imperfect remedy that leaves open questions about recovery and user trust given repeated bridge failures in recent months.