The assertion nobody was checking
An optimistic rollup is exactly as safe as the number of people actually recomputing its assertions. Arbitrum’s model needs one honest validator out of N — but here the whole of N sits inside the operator’s allowlist. There is no outside party in the model at all.
We cannot stop a bad assertion at the protocol level. We can turn a silent failure into a loud one, on the first pass, with a signature anyone can check.