Honestly this is more scary than a normal hack.
You can fix buggy code, you can audit contracts, but you can’t easily fix human access and internal permissions.
If this really was a social engineering or access control issue, then the biggest risk in crypto isn’t smart contracts anymore it’s people.