tl;dr: in what is supposed to be a decentralized system, 9 validator machines had the power to approve or deny transactions. 4 of these are owned by the same pe

tl;dr: in what is supposed to be a decentralized system, 9 validator machines had the power to approve or deny transactions. 4 of these are owned by the same person and shared credentials, and 1 of these had its credentials stored on the aforementioned 4 because user load was bad once, so they just decided to use the other machine’s resources. In other words, hacking one validator gave a user full access to the system, because that gave them access to 5/9 validators which is a majority.