The part that amazes me is that this exploit was not that intricate when compared to malware, code infiltration or exfiltration or even a pure, old fashioned hack.
Some reverse engineering and risk assessment of this process would, most likely, have revealed this vulnerability.
Now, the horse is out of the barn. The only "we should have" thought processes need to be directed at the solution.
This also opens the door wide frikkin open for regulation and oversight by the government(s). I fear that these projects, and exchanges, become just another tradeable commodity and the beauty and freedoms we longed for with DEX will now be in the control of those who have always controlled (and eat the first and best piece of every pie placed in front of them, leaving crumbs for the rest).
This CAN be done right. I don't think it now gets done with the original dream and intent.
That's sad. We'll see.