"The Drift incident reveals the cruelest truth about DeFi: 2/5 multi-signature + zero timelock allowed attackers to steal 550 million TVL with just two compromised individuals, rendering code auditing completely ineffective. When the opponent is a state-sponsored hacker capable of 9 days of premeditation, 'no vulnerabilities ≠ security,' and key governance architecture is more important than contract code." - Commentary by Cai Jijun, founder of the Youhao AI project, on the Drift incident.