Map Protocol's cross-chain bridge on Ethereum and BSC was attacked, according to ChainCatcher. Blockaid monitoring revealed that the attacker manipulated the Butter Bridge V3.1 contract to mint approximately 10 trillion MAPO tokens to a newly created EOA address, vastly exceeding the legitimate supply of 208 million tokens by 4.8 million times. DeFi community YAM reported that the attacker has profited around 52.2 ETH. In response, MAP Protocol stated that they are aware of the incident and are coordinating with external security partners to investigate and contain the situation. The bridge between MAPO ERC-20 and the MAPO mainnet has been suspended, and trading of MAPO ERC-20 tokens on Uniswap is advised against during the mitigation process, as the liquidity pool remains at risk.
Butter Network also responded, stating that ButterSwap has been paused and the team is working with external security partners to investigate. Pending transactions will be processed once security is restored. User funds are not at risk, and all affected transactions will be fully processed after recovery.