From September 12 to September 26, an exposed API inadvertently granted bots advanced visibility into pending transactions. These automated programs used this early access to push prices unfavorably against regular traders, immediately reversing their positions afterward to capture the resulting price difference. This maneuver netted the bots approximately $136K in profit.

In response, the platform distributed $312K in restitution to fully reimburse the affected users. Although providing financial compensation is an excellent way to address harm after an incident takes place, implementing robust privacy protocols effectively eliminates these vulnerabilities before they can ever be exploited.