After Bybit was attacked, the industry cried out for a year, "Be careful with multi-signatures" and "Verify your interface." Then Bitget and Binance were attacked as well. The reason is simple: nobody really took it seriously. In Bybit's case, the Safe interface was modified, and the CEO himself signed off on handing over the cold wallet logic. Afterwards, everyone discussed "Users need to be careful of phishing" and "Exchanges need to improve training." Nobody forced themselves to dismantle that fragile "human verification + third-party interface" process. Because dismantling it would require rebuilding the system, increasing costs, and reducing efficiency, and most people thought, "It won't happen to me." As a result, Bitget used a third-party security product, and a zero-day attack directly injected forged withdrawal orders into the system, with its own signing machine executing them. Binance was even more thorough; its signing pipeline was taken over, and with EIP-7702, its multi-chain hot wallets were essentially turned into ATMs. The core of all three attacks was the same: you think you're signing a normal operation, but you're actually signing off on handing over control. The industry wasn't unaware of the problem; they saw it but didn't take action. Exchanges' core KPIs are growth, trading volume, and listing speed, not "perfecting the isolation of the signature chain." Security investment always takes a backseat to business operations, only being hastily patched up when breached. Patching can save users, but it can't save the process itself. More importantly, after Bybit, no one truly audited the third-party tools and internal signature systems they relied on. Everyone was waiting for the next target to be compromised, then continuing to say, "This time is different." North Korea, on the other hand, was very serious, treating the signature layer as a fixed target and continuously attacking it, becoming more proficient each time. Therefore, recurrence is not surprising. Because the pain wasn't severe enough to change behavior. When breached again, some will still say, "We've learned our lesson."