Titano Finance relied on a contractor to deploy the PLAY contract, but the contractor included a backdoor allowing either the contract owner or deployer to modify the PrizeStrategy. The contractor exploited this privilege to steal 4,828.7 BNB. All stolen funds were returned to Titano's treasury on February 23rd.

On February 14, the Titano Finance project on the BSC chain was attacked. The attackers made a total of 4,828.7 BNB, or about $190w. According to the official Titano Finance investigation, “The problem arose when we trusted a contractor to deploy the PLAY contract. Although ownership was transferred back to us after deployment, it was the same deployer wallet that allowed two days ago from our PLAY Hacking that steals all Titano in the protocol.”