A significant amount of money was lost due to a silent, zero-interaction dev environment exploit

No wallet connection
No signing
No running of the app

Just cloning a repo and opening it in VS Code