OWNLY Incident Analysis

On May 10, 2022 the OWNLY 'Stake-to-Own Mustachio Marauder' staking contract was exploited via an unstake() logic flaw that allowed repeated unstaking and drained approximately 930M OWN tokens, which the attacker swapped for roughly 115 BNB (~$37K); the report includes exploit transaction and contract addresses, analysis of the vulnerability, and the project's remediation steps (airdrop and planned audits).