Aurellion Labs on Arbitrum was drained of $456,442.53 USDC on May 12, 2026 after incomplete Diamond Proxy initialization left the SafeOwnable facet's _initialized slot at zero. The attacker called initialize() to seize ownership and inject a draining facet.