Omnipus Incident Analysis

**Omnipus presale drain (11 Sep 2024):** A smart-contract vulnerability in Omnipus (commented-out payNative check) was exploited to refund the contract balance to attacker-controlled refund addresses, resulting in ~\$30k stolen from the presale; the report includes transaction hashes, attacker addresses, an attack step-by-step, and subsequent fund flows to a privacy service.