An attacker drained 91 staking positions in a single transaction on October 31, 2026, by submitting 99 zero-value withdrawal requests against unbacked staking positions on b14g.