Was observing recent attack and resolution process for @ResupplyFi as a bystander. Some takeaways: - Resolution process goes as professionally as it can. Great top-tier team there; - Some people from community made false accusations, especially a bunch of people connected to @OneKeyHQ. Will not tell conspiracy theories I have about that, but at least will avoid ever buying OneKey products; - A bug which made it possible is very unobvious (missed by excellent team and excellent auditors), however could be avoided very simply (seeding markets before they are voted). Seeding ERC4626 vaults before use is a good way to address even unknown bugs of that class! - One should be very paranoid about smart contract code, and even auditors are not a guarantee. Always good to have more audits and more fuzzing. Safety first!