The incident has raised questions about whether the vulnerability was truly unknown before the attack. Aurora co-founder Alex Shevchenko noted that a Binance address funded the attacker earlier in the week, suggesting pre-planned execution and advance knowledge of the exploit. He argued the bug was not a genuine zero-day, pointing out that the network's automatic handling of the reorganization once the DoS stopped implies some portion of the hashrate was already running updated code — meaning someone knew about the vulnerability before it was publicly disclosed. Blockchain developer Vadim added that the timing and targeting of the attack did not appear opportunistic, drawing a broader conclusion that low-hashrate layer-1 blockchains are no longer safe collateral for cross-chain value transfer.