MAPO Crashes 96% After Quadrillion Token Mint via Bridge Exploit
MAPO token dropped 96% after an attacker exploited Butter Network's cross-chain bridge to mint a quadrillion tokens. The dump drained $180K from Uniswap, with nearly a trillion tokens still threatening markets. The incident highlights bridge vulnerabilities amid a wave of DeFi exploits.
Quick Take
Attacker minted a quadrillion MAPO tokens via Butter Bridge.
Price plunged from $0.003 to $0.0001 in hours.
About 1B tokens dumped for 52 ETH on Uniswap.
Map Protocol paused mainnet; attacker tokens will be invalidated.
Market Impact Analysis
BearishThe exploit caused an immediate 96% crash in MAPO price and ongoing dumping risk from retained tokens severely undermines confidence in the token and bridge.
Speculation Analysis
Key Takeaways
- An attacker minted a quadrillion MAPO tokens by exploiting a Solidity bug in the Butter Bridge.
- MAPO price imploded 96%, collapsing from $0.003 to $0.0001 within hours.
- Roughly 1 billion tokens were dumped on Uniswap, draining $180K in ETH from liquidity pools.
- The attacker still commands nearly a trillion tokens, menacing remaining DeFi liquidity.
- Map Protocol plans to neutralize attacker holdings via a snapshot and token migration.
What Happened
MAPO, the native token of the omnichain Map Protocol, suffered a catastrophic 96% price collapse after a critical vulnerability in the Butter Network cross-chain bridge was exploited. The attacker weaponized a Solidity-level flaw to mint a quadrillion new tokens — a number tens of thousands of times larger than the legitimate supply. Within hours, the excess flooded markets, triggering a panic selloff that sent the token's value from $0.003 to just $0.0001. The attacker immediately offloaded about 1 billion MAPO on Uniswap, extracting 52 ETH worth roughly $180,000. Yet nearly a trillion tokens remain in a newly created wallet, posing an ongoing threat to any remaining liquidity. In response, Map Protocol paused its mainnet and announced plans for a token snapshot and migration to expunge the attacker’s holdings.
The Numbers
The sheer scale of the exploit is staggering. A single quadrillion tokens were conjured out of thin air, dwarfing the existing circulating supply. The resulting sell pressure vaporized liquidity on Uniswap, with one billion tokens swapped for just 52 ETH. The price cratered from $0.003 to $0.0001 — a 96% wipeout. The attacker’s wallet still holds close to a trillion tokens, a ticking time bomb for any pool that lists the asset. The incident came amid a brutal month for DeFi, with at least 18 protocols exploited in May alone.
Why It Happened
The root cause was a classic Solidity contract vulnerability within the bridge’s message verification logic, not a private key compromise or light client failure. The attacker first relayed a genuine oracle multisig message, then deployed a malicious contract at a specific address. A subsequent “retry” message, engineered to appear identical in hash to the valid one, slipped past the bridge’s checks and triggered an unconstrained token mint. Multiple dynamic fields in the contract created an opening that the attacker exploited without stealing any keys.
Broader Impact
This exploit is the latest in a string of cross-chain bridge attacks that have rattled DeFi in May. Including breaches at THORChain, Verus Protocol’s Ethereum bridge, and Echo Protocol, over 18 projects have been compromised this month alone. The MAPO incident underscores the persistent risk of bridge vulnerabilities and may accelerate calls for more rigorous smart contract audits and circuit breaker mechanisms in cross-chain infrastructure.
What to Watch Next
- Snapshot and Migration: Map Protocol’s success in executing a clean snapshot and issuing a new token will determine whether any value can be salvaged.
- Attacker Dumping: With nearly a trillion tokens still in play, any movement on-chain could trigger further selloffs, especially if the tokens reach centralized exchanges.
- Industry Response: The wave of bridge exploits may prompt security standards upgrades, with protocols potentially adopting more aggressive pause and migration mechanisms.
This article is for informational purposes only and does not constitute financial advice.
Always late to trends?
Join for the latest news, insights & more.
Disclaimer: Bytewit is an independent media outlet that delivers news, research, and data.
© 2026 Bytewit. All Rights Reserved. This article is for informational purposes only.
