WealthManagementV2 Owner Privilege Hijack — 26,414 USDT Loss

On September 8, 2026, an attacker on BNB Chain gained unauthorized control of WealthManagementV2's owner privileges, most likely via a leaked private key. Once in control, the attacker immediately called updatePlanConfig to set malicious parameters — period=0 and an interestMultiplier/unlockMultiplier of 528,300,000 — without any timelock or bounds check, which allowed inflated interest to be minted and claimed. The attacker extracted 26,414 USDT from the contract before the exploit was flagged.