This shows some of the flaws in crypto "security audits", IMO. This person said they skimmed over the exploit (a mechanism that prevented the contract interacti

This shows some of the flaws in crypto "security audits", IMO. This person said they skimmed over the exploit (a mechanism that prevented the contract interacting with the "owner address", which could be set to an exchange address to make selling the token impossible), because they assumed it was "an amateur mistake". But a good review would have required that to be fixed regardless: if you audit a web app and see a vuln that's not part of an exploit chain you still fix it because it can become part of an exploit chain later. But in crypto, the point of audits seems to be assuaging people's fears instead of making actually secure software, and in the rush to invest / FOMO they didn't want to slow things down by not investing until this "small thing" was fixed. So instead of losing gains, they lost everything.