Kelp burned the exploiter’s 117,132 rsETH. The move is part of a two-week recovery window with withdrawals tentatively live within 24 hours. What OpenZeppelin flagged is the part worth sitting with: the system failed operationally. That’s a fundamentally different category of risk and most DeFi protocols are exposed to the same thing right now without knowing it. Chainlink CCIP migration, four independent attestors, 64 block confirmations. The rebuild is serious. But when users get their withdrawal button back after a $293M Lazarus hack… do they exit or do they stay? 👀