Particle.news

Map Protocol Bridge Exploit Mints Quadrillion MAPO and Sends Token Down 96%

Security firms point to a Solidity validation bug in Butter Bridge v3.1, prompting Map Protocol to pause the mainnet, start a contract migration, and plan an asset snapshot.

Overview

  • A flaw in Butter Bridge v3.1 allowed an attacker to create 1,000,000,000,000,000 MAPO tokens, far exceeding the legitimate supply and inflating the token on-chain.
  • The mint triggered a rapid market crash that pushed MAPO about 96% lower and cut its market capitalization to below $1 million.
  • On Wednesday Map Protocol halted conversions between the Ethereum ERC-20 MAPO and the MAPO mainnet and paused the mainnet while it investigates.
  • The attacker sold a small portion of the fake supply and extracted roughly 52 ETH, while most of the minted tokens remain in attacker-controlled wallets and create a persistent supply overhang.
  • Map Protocol is migrating to a new contract address and says it will run an asset snapshot to exclude attacker-held balances, a common but imperfect remedy that leaves open questions about recovery and user trust given repeated bridge failures in recent months.