The contract logic exploited in the October 31, 2026 b14g breach had been active for approximately 17 months prior to the incident without requiring administrator key compromises.