My suggestions:
- Shut down the relevant contracts as soon as possible to prevent further losses and greater negative impacts. Report the incident to the police, freeze the hacker’s wallet decisively, and negotiate with the hacker to attempt asset recovery. Timely disclosure of the details of these efforts is essential.
- Compensation should treat all affected users equally, regardless of whether the loss was due to deposits or the failure to deauthorize contracts. Radiant users who missed the deauthorization notification on the website suffered significant losses as tokens in their wallets were transferred through the Radiant contract. This has caused severe impacts on their work and lives. These losses and disasters should not be borne by the users alone.