

Not really an excuse but I expect writing a browser is an extremely intensive project and perhaps they were unprepared.
Navigating any code base that isn’t your own adds it’s own challenge on top.
So at this point I think it’s a “deer in headlights” case with some “head in sand” thrown in.
https://www.dexpose.io/oracle-breach-scan/