Good analysis, designing a strong contract, is certainly important, but eventually any code is hackable. Agree, assurance will be a necessary fallback solution.