Regarding bRUNE: the contract has been bonding RUNE to whitelisted Nodes. The malicious Node was not whitelisted and had no bRUNE bonded, though other Nodes in the compromised Asgard Vault do have bRUNE.