I was thinking a bit about the BONKfun incident. They handled a domain hack in mid-March where users lost quite a bit of money — about $30,000. It wasn't actually an internal system problem, but rather an external social engineering attack where the attackers changed the domain registrar. However, the team responded quickly — shutting down the website, working with wallet providers, and restoring everything by March 18-19. They promised to compensate users with 110% to cover potential opportunity costs. Some antivirus software still shows the domain as risky, but they set up an alternative domain so everyone can access it. Such quick response and compensation promises are encouraging, but security remains a major challenge.