The attacker never got to sell a single token. But supply-shock rallies are historically short-lived, and BEAM is no exception.