The old door was still unlocked

On April 26, 2026, someone found a contract Scallop DeFi had stopped using two years ago and walked through it like a door left open in an empty building. The money was gone in minutes. The auditors had looked at everything except the thing that mattered.