The incident response team paused the contracts and contacted exchanges within 30 minutes of detection.

Robust incident response plans include pre-arranged contacts at major exchanges who can freeze stolen assets quickly.