Hope everyone caught up in the situation gets made whole. Genuinely. Worth explaining the architecture though, because "be careful where you put your money" isn't the lesson people think it is. Any card that requires you to pre-load a balance creates a pool that sits there waiting to be spent. Settlement lags, so it sits for days. Whatever can authorize a withdrawal from that pool can reach all of it at once. That's true whether the contract is self-custodial or not. Just in time is a different shape. Nothing is pre-loaded. Funds move at the moment of authorization, for the exact amount of the purchase, then settle. There's no standing balance to drain. That's not a claim that one is safe and one isn't. Every model concentrates trust somewhere and you should know where yours is. The difference is what a failure costs you. Pre-funded fails all at once. JIT fails for one transaction.