examples: anchor T10.001 2025 (Shibarium) + T5.005-with-recovery 2020 (SushiSwap)

Closes P0 zero-incident cells for T10 in 2025 and adds the canonical 2020
launch-mechanic anchor.

- Shibarium PoS-bridge Sep 2025: combined-vector T10.001 + T16.001
  sub-shape; partial validator-key compromise composed with flash-loan
  stake-amplification (4.6M BONE) past the 2/3 super-majority. Demonstrates
  the Beanstalk Apr 2022 lesson did not propagate from the governance
  sub-domain into bridge-validator-set-eligibility designs even 41 months
  later. ~$2.3M-$4.1M loss; BONE freeze as partial-recovery channel.
- SushiSwap Chef Nomi Sep 2020: dev-fund T5.005 *near-rug returned*; $14M
  / 38,000 ETH extracted then voluntarily returned six days later under
  public-pressure escalation. Canonical 2020 anchor for the vampire-attack
  T1 sub-shape and the v0.1 reference for the public-pressure-mediated
  voluntary-return T5.005 recovery channel.

Citations added in-commit (15 new keys); validators clean.

Signed-off-by: Dmytro Chystiakov <dlchistyakov@gmail.com>

Author: iZonex

citations.bib

@@ -12443,3 +12443,146 @@ @misc{utodaybuildfinance2022
   url          = {https://u.today/build-finance-defi-drained-by-hostile-takeover-05-million-goes-to-tornado},
   note         = {OAK v0.1 — verified. Contemporaneous press; cited for the Tornado Cash routing of approximately 0.5M of proceeds (T7.001 mixer-routed-hop tag).}
 }
+
+% =====================================================================
+% Shibarium PoS-bridge validator-key + flash-loan exploit — September 2025
+% =====================================================================
+
+@misc{shibariumannouncement2025,
+  author       = {{Shibarium / Shiba Inu}},
+  title        = {Twitter announcement of bridge exploit and 4.6{M} {BONE} freeze (September 12, 2025)},
+  year         = {2025},
+  howpublished = {Operator-side communication, Twitter / X},
+  url          = {https://x.com/Shibtoken/status/1966845298774278444},
+  note         = {OAK v0.1 — verified. Operator-side first-acknowledgement; canonical for the 4.6M-BONE flash-loan, the validator-quorum-amplification mechanic, and the BONE-freeze recovery channel.}
+}
+
+@misc{shibdailyshibariumstatus2025,
+  author       = {{The Shib Daily}},
+  title        = {{\$}2{M}+ Shibarium Bridge Exploit: Crucial Response Now Limits Losses},
+  year         = {2025},
+  howpublished = {Operator-aligned press, news.shib.io},
+  url          = {https://news.shib.io/2025/09/16/2m-shibarium-bridge-exploit-crucial-response-now-limits-losses/},
+  note         = {OAK v0.1 — verified. Operator-aligned status summary; cited for the limit-loss outcome and the operational-response framing.}
+}
+
+@misc{shibariumkaaldevreport2025,
+  author       = {{The Shib Daily}},
+  title        = {Shibarium Bridge Exploit: {Kaal} Drops Latest Dev Report Post Hack (September 22, 2025)},
+  year         = {2025},
+  howpublished = {Operator-aligned press, news.shib.io},
+  url          = {https://news.shib.io/2025/09/22/shibarium-bridge-exploit-kaal-drops-latest-dev-report-post-hack/},
+  note         = {OAK v0.1 — verified. Operator-side extended forensic disclosure; canonical for the four candidate intrusion vectors (developer-machine, AWS-KMS, npm, insider), the 17-token breakdown, and the {\$}4.1M direct-loss figure.}
+}
+
+@misc{ccnshibarium2025,
+  author       = {{CCN}},
+  title        = {{\$}4.1{M} Shibarium Bridge Hack: {SHIB} Tanks, {BONE} Collapses {\&} Validator Keys Compromised},
+  year         = {2025},
+  howpublished = {Contemporaneous press, CCN},
+  url          = {https://www.ccn.com/education/crypto/shibarium-bridge-hack-shib-bone-crash-explained/},
+  note         = {OAK v0.1 — verified. Contemporaneous press; cited for the per-asset breakdown (~\$1.0M ETH, ~\$1.3M SHIB, ~\$717K KNINE, ~\$680K LEASH, ~\$260K ROAR) and SHIB / BONE market-cap impact figures.}
+}
+
+@misc{blockonomishibarium2025,
+  author       = {{Blockonomi}},
+  title        = {{SHIB} Updates on Shibarium Bridge Exploit, Validator Key Lockdown Underway},
+  year         = {2025},
+  howpublished = {Contemporaneous press, Blockonomi},
+  url          = {https://blockonomi.com/shib-updates-on-shibarium-bridge-exploit-validator-key-lockdown-underway/},
+  note         = {OAK v0.1 — verified. Contemporaneous press; cited for the validator-key-lockdown response and PeckShield / Hexens / Seal 911 forensic engagement.}
+}
+
+@misc{bitcoinistshibarium2025,
+  author       = {{Bitcoinist}},
+  title        = {{Shiba Inu} New Security Update On Shibarium Bridge},
+  year         = {2025},
+  howpublished = {Contemporaneous press, Bitcoinist},
+  url          = {https://bitcoinist.com/shiba-inu-new-security-update-shibarium-bridge/},
+  note         = {OAK v0.1 — verified. Contemporaneous press; cited for the four candidate intrusion vectors disclosure framing.}
+}
+
+@misc{vibraniumshibarium2025,
+  author       = {{Vibranium Audits}},
+  title        = {Shibarium Suffers {\textasciitilde}{\$}2.3-{\$}3{M} Validator and Bridge Exploit --- Network Integrity Tested},
+  year         = {2025},
+  howpublished = {Independent audit-firm forensic walkthrough, Vibranium Audits},
+  url          = {https://www.vibraniumaudits.com/post/shibarium-suffers-2-3--3m-validator-and-bridge-exploit----network-integrity-tested},
+  note         = {OAK v0.1 — verified. Independent audit-firm forensic walkthrough; cited for the 2/3-validator-supermajority technical framing and the same-block-staked-balance-computation observation.}
+}
+
+% =====================================================================
+% SushiSwap Chef Nomi dev-fund swap-and-return — September 2020
+% =====================================================================
+
+@misc{coindesksushichefnomi2020,
+  author       = {{CoinDesk}},
+  title        = {`I F**ked Up': {SushiSwap} Creator {Chef Nomi} Returns {\$}14{M} Dev Fund},
+  year         = {2020},
+  howpublished = {Contemporaneous press, CoinDesk},
+  url          = {https://www.coindesk.com/tech/2020/09/11/i-fked-up-sushiswap-creator-chef-nomi-returns-14m-dev-fund},
+  note         = {OAK v0.1 — verified. Primary contemporaneous press source; canonical for the {\$}14M / 38,000 ETH return figure and the dump-to-return six-day timeline.}
+}
+
+@misc{thedefiantsushichefnomi2020,
+  author       = {{The Defiant}},
+  title        = {``I F*cked Up. And I am Sorry:'' {Chef Nomi} Returns {\$}14{M} of {ETH} to {SushiSwap}},
+  year         = {2020},
+  howpublished = {Contemporaneous press, The Defiant},
+  url          = {https://thedefiant.io/news/defi/i-fcked-up-and-i-am-sorry-chef-nomi-returns-14m-of-eth-to-sushiswap},
+  note         = {OAK v0.1 — verified. Contemporaneous press; cited for the public-apology framing and the community-pressure dynamics.}
+}
+
+@misc{theblocksushichefnomi2020,
+  author       = {{The Block}},
+  title        = {Pseudonymous {SushiSwap} founder returns 38,000 {ETH} to project treasury after public outcry},
+  year         = {2020},
+  howpublished = {Contemporaneous press, The Block},
+  url          = {https://www.theblock.co/linked/77587/sushiswap-founder-eth-project-treasury},
+  note         = {OAK v0.1 — verified. Contemporaneous press; cited for the 38,000 ETH return figure and the public-outcry framing.}
+}
+
+@misc{decryptsushichefnomi2020,
+  author       = {{Decrypt}},
+  title        = {{SushiSwap}'s `{Chef Nomi}' Repents, Gives Back {\$}14 Million},
+  year         = {2020},
+  howpublished = {Contemporaneous press, Decrypt},
+  url          = {https://decrypt.co/41547/sushiswap-chef-nomi-gives-back-14-million-ethereum},
+  note         = {OAK v0.1 — verified. Contemporaneous press; cited for the timeline reconciliation across the dump-to-return window.}
+}
+
+@misc{cointelegraphsushichefnomi2020,
+  author       = {{Cointelegraph}},
+  title        = {{Chef Nomi} has returned all funds to the {SushiSwap} community},
+  year         = {2020},
+  howpublished = {Contemporaneous press, Cointelegraph},
+  url          = {https://cointelegraph.com/news/chef-nomi-has-returned-all-funds-back-to-the-sushiswap-community},
+  note         = {OAK v0.1 — verified. Contemporaneous press; cited for the consolidated return-event reporting.}
+}
+
+@misc{defiratesushichefnomi2020,
+  author       = {{DeFi Rate}},
+  title        = {{Chef Nomi}'s Controversial Exit Shakes {SushiSwap} Community},
+  year         = {2020},
+  howpublished = {Community-side analysis, DeFi Rate},
+  url          = {https://defirate.com/news/sushiswap-rug-pull/},
+  note         = {OAK v0.1 — verified. Community-side analysis; cited for the SUSHI ~73\% price-collapse figure.}
+}
+
+@misc{finematicsvampireattack,
+  author       = {{Finematics}},
+  title        = {What is a Vampire Attack? {SushiSwap} Saga Explained},
+  year         = {2020},
+  howpublished = {Retrospective educational analysis, Finematics},
+  url          = {https://finematics.com/vampire-attack-sushiswap-explained/},
+  note         = {OAK v0.1 — verified. Retrospective educational analysis; cited for the canonical vampire-attack mechanic walkthrough.}
+}
+
+@misc{geminisushivampire,
+  author       = {{Gemini Cryptopedia}},
+  title        = {{Sushiswap}: A {Uniswap} Fork and {DeFi} Protocol},
+  year         = {2021},
+  howpublished = {Educational reference, Gemini Cryptopedia},
+  url          = {https://www.gemini.com/cryptopedia/sushiswap-uniswap-vampire-attack},
+  note         = {OAK v0.1 — verified. Retrospective educational reference; cited for the vampire-attack as a recurring DeFi-launch-mechanic class.}
+}