@askrafiki's thread

2/4 🧵 The exploit wasn’t some elegant “code is law” galaxy-brain attack. It looks like old-fashioned operational failure: compromised private keys let the attacker drain project-controlled funds and push malicious contract changes. Per Decrypt, roughly 141.2 million H were drained and another 200 million H were minted after contract upgrades were abused. That’s the ugly truth of crypto in 2026: sometimes the weak point isn’t the protocol design, it’s one laptop and bad key hygiene.