A project sending daily payouts to close to a million people got its reserves drained after a malicious Super App found a way around stream liquidations. Team moved fast with a Sept. 4 hotfix, bringing back whitelisting and shutting down the insolvent accounts it could find. Good on the quick patch, but this is a reminder that "daily income" crypto products carry real smart contract risk, not just market risk. Worth watching how they make affected users whole.