Move type-checks resources at runtime. That's the whole safety pitch.
A stale-cache path let the Aptos VM read one resource as another. Patched fast, no funds moved.
That bug class slips under the contract audit. Clean code can't save you when the runtime breaks its own rules.
