Yes I saw they attacked the sub domain holding the javascript (developers.kakao.com), but could they have also attacked the main domain? Sub resource integrity

Yes I saw they attacked the sub domain holding the javascript (developers.kakao.com), but could they have also attacked the main domain? Sub resource integrity wouldn't help if they could have re-routed requests from klayswap.com