2.5-hour detection-to-shutdown window on April 10 is what kept this from becoming another Balancer-style frontend drain. Non-custodial architecture proved its value yet again — compromised frontend, zero user fund losses. Tagging the attack vector as "AI-driven" puts this in a different category than the social-engineering DNS hijacks hitting Steakhouse and Celer; if attackers are automating reconnaissance and exploit generation with AI, the three-firm response stack (Blockaid tx simulation + ZeroShadow fund tracing + ChainPatrol domain monitoring) needs to be the baseline for every wallet-connected frontend, not the post-incident scramble.

Top comment by @Benthic