In most cases yes, at some point the attacker will want to turn his tokens into cash and at that point he is at the mercy of centralised services who gets to de

In most cases yes, at some point the attacker will want to turn his tokens into cash and at that point he is at the mercy of centralised services who gets to decide. Here's an old computerphile video: https://youtu.be/UlLN0QERWBs https://youtu.be/UlLN0QERWBs Etherscan provides such a service for ethereum: https://info.etherscan.com/ethprotect/ https://info.etherscan.com/ethprotect/ As long as there are enough centralised services with enough volume that agree such tokens are tainted the decision is effectively made for the entire ecosystem.