The MAP Protocol's Butter Bridge was severely exploited on May 20, 2026, when an attacker created 1,000,000,000,000,000 MAPO Token , approximately 4.8 million times more than the total valid circulating supply of only about 208 million.
Immediately after the incident, the price of the MAP Protocol Token dropped by nearly 30%.
MAP Protocol has seen over 1 quadrillion new Token created.
Security firm PeckShield immediately issued a warning, pointing out a security vulnerability in Butter Bridge V3.1's OmniServiceProxy contract, which allowed for the unauthorized creation of Token on the Ethereum and BSC networks.
Follow us on X for the latest news updates.
The attacker exploited the Butter Bridge and created a forged Mint order, transferring 1 quadrillion MAPO from address 0 (of unknown origin) to wallet 0x40592025392BD7d7463711c6E82Ed34241B64279.
on-chain data shows that the attacker sold a portion of the fake MAPO, withdrawing approximately 52.2 ETH (~$110,000) and further withdrawing over $180,000 in liquidation from pools on Uniswap before the price collapse.
The majority of the newly created MAPO is still in the hacker's wallet.
This incident is evidence of a worrying trend in 2026: PeckShield has seen numerous exploits on its bridges, resulting in hundreds of millions of dollars in losses in the DeFi market this year.
Market impact: MAPO prices plummet.
MAPO is the native Token of the Bitcoin Layer-2 project, which features multi- chain connectivity. Before the hack, the price of MAPO was around $0.003. The massive supply inflation led to increased selling pressure, causing liquidation to evaporate rapidly.
At the time of writing, MAPO is trading around $0.001558, down nearly 30% from before the incident.
MAP Protocol (MAPO) price performance. Source: CoingeckoHolder and LP suffered immediate losses when trading pairs experienced sharp price swings.
The MAP Protocol positions itself as a secure infrastructure for BTC, stablecoins, and Tokenize assets, utilizing light client technology and MPC-based verification.
However, the vulnerability in the bridge exposed a flaw in message authentication despite the presence of security measures.
The project development team has yet to make an official announcement regarding remedial measures, such as suspending contracts, blocking wallets, or adjusting the Token supply.
Investors should refrain from trading MAPO or using related intermediaries until official information is available from the project.
This event further highlights the potential risks of using cross-chain solutions. With bridging attacks continuing to occur throughout 2026 , users and projects should prioritize audited verification solutions with rapid incident response mechanisms.
