Regarding bonded RUNE via bRUNE: the malicious node was not whitelisted and had no bRUNE bonded; other nodes in the compromised vault did have bRUNE. If Nodes identify and vote to slash the malicious node, its RUNE could be fully slashed to cover losses and remaining nodes in the compromised vault refunded, keeping bRUNE-bonded RUNE safe