No immediate questions, but happy to have some great weekend reading. A quick pass through finds one of the best and clearest explainers I've seen. Thanks for this and all the materials you produce.
This is conveniently suspect, no? “Drift migrated its Security Council on March 27 to a new 2-of-5 threshold with zero timelock. That eliminated the delay that would have allowed detection before admin actions took effect.” This was after the perp started working on the heist earlier in the month.
Journalistic integrity (or not) arguments aside, that this happened with such an expensive piece of equipment is disappointing. Reminds me of Deal of the Century; “you ever heard of rain??!”