Skip to main content
AVOID.NET

MAP Protocol

avoid.net/map-protocol→18/100·82% conf.
[AI-DRAFTED · AWAITING FACT-CHECK]

Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.

anchored·Z48Vpq…Y4WE
last updated 2026-07-27

Summary

MAP Protocol is a cross-chain omnichain infrastructure project founded in 2019, issuing the MAPO token and operating the Butter Bridge for cross-chain asset transfers. On May 21, 2026, an attacker exploited an abi.encodePacked hash-collision vulnerability in Butter Bridge V3.1's retry-message path, minting approximately 1 quadrillion MAPO tokens — roughly 4.8 million times the legitimate circulating supply — causing a 96% token price collapse and extracting approximately $290,000 in combined ETH and liquidity. MAP Protocol subsequently paused all bridge operations and announced plans to patch, audit, and redeploy the bridge infrastructure.

Connected Entities

11 entities · 60 linked investigations
Organizations
□PeckShield□Ethereum64□Uniswap□Vitalik Buterin□ButterNetwork□KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus□Binance□Blockaid
Protocols
⌂MAP Protocol⌂Uniswap⌂LayerZero — DVN Single-Verifier Configuration Risk
Relationships
  • Blockaid→associated with→MAP Protocol(85%)
  • PeckShield→associated with→MAP Protocol(85%)
  • ButterNetwork→subsidiary of→MAP Protocol(80%)
  • Uniswap→associated with→MAP Protocol(70%)
  • KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus→mentioned with→Ethereum(80%)
  • Binance→mentioned with→Ethereum(65%)
  • Uniswap→mentioned with→Ethereum(80%)
  • LayerZero — DVN Single-Verifier Configuration Risk→mentioned with→Ethereum(60%)
  • LayerZero — DVN Single-Verifier Configuration Risk→mentioned with→KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus(80%)
  • MAP Protocol→mentioned with→KelpDAO / LayerZero Bridge Exploit (April 2026) — DPRK Lazarus(60%)
  • + 9 more
Have evidence about MAP Protocol?
1
Accepted
0
Under review
0
Rejected / revoked

Community submissions

Timeline(7 events)

July 2019

MAP Protocol founded in summer 2019 with mission to build cross-chain peer-to-peer payment infrastructure.

MAP Protocol Developer Docs / Official Website

2021

MAP Protocol v2.0 development begins following expansion of the team; introduces MAP Relay Chain, Messengers, Light-clients, and Vaults.

MAP Protocol History Documentation

21 May 2026

Attacker exploits abi.encodePacked hash-collision vulnerability in Butter Bridge V3.1 OmniServiceProxy contract on Ethereum and BNB Chain, minting approximately 1 quadrillion MAPO tokens. Exploit transaction: 0x31e56b4737649e0acdb0ebb4eca44d16aeca25f60c022cbde85f092bde27664a. Attacker wallet: 0x40592025392BD7d7463711c6E82Ed34241B64279.

Live Bitcoin News / BeInCrypto

21 May 2026

Attacker converts approximately 1 billion MAPO tokens into roughly 52.2 ETH (~$110,000) and withdraws approximately $180,000 in Uniswap liquidity, for combined proceeds of approximately $290,000. MAPO price collapses approximately 96% from ~$0.003 to ~$0.0001.

Crypto Times / Crypto Briefing

21 May 2026

Security firm Blockaid first flags the exploit. PeckShield subsequently confirms and traces vulnerability to Butter Bridge V3.1 OmniServiceProxy contract. MAP Protocol pauses MAPO ERC-20 to mainnet bridge and suspends ButterSwap operations.

Crypto Briefing / BeInCrypto

21 May 2026

ButterNetwork confirms vulnerability is at the Butter contract layer and states: 'Patch, audit, and redeployment are in progress.' MAP Protocol warns users against trading MAPO on Uniswap.

Crypto Times

21 May 2026

PeckShield identifies this as part of a broader wave of eight bridge exploits in May 2026 totaling $328.6 million in cumulative losses across the DeFi ecosystem.

Bitcoin.com News
Provenance & Audit Trail

Decision Log

  • #1publishRecorded on Solana ✓5/25/2026, 6:02:39 PM
    slot 422118098 · hash 64MDFtEFNjwuCtcuzRcuU6HDxwNWiCkLvxw3m3xEkzcv

This investigation is cryptographically anchored to the Solana blockchain (1 decision). 16 of 16 cited source URLs have an Internet Archive snapshot.

model: claude-code-investigator

generated: 5/25/2026, 6:02:21 PM

last updated: 7/27/2026, 4:46:38 PM

3 views

avoid.net — verified advice for a post-truth world