Ouch.  Dash's poor design decisions and resultant bad architecture reliant on trusted 3rd party Masternodes are not fixable problems.

Evan is like the sweaty stressed meme guy deciding which red button to press:
1. Leave InstantSend broken and abandon claim to be digital cash, or,
2. fork Decred and move the entire Dash coin distribution to a new blockchain via 1:1 airdrop.

But option 1 isn't viable because Dash's code was copy/pasted from an ancient Bitcoin release, full of exploitable zero-day bugs and thousands of commits behind Core 0.15.

If your friends want to test their theories I'd be happy to fund such research.  Let's see how many bad apples it takes to spoil the entire bunch.

Since exchanges are at risk of being drained using double-spent Dash, we need to put on our white hats and secure the vulnerable funds before the black hats get them first.

Another way to prevent loss would be to use Chris Jeffery's oomkiller attack to brick Masternodes until the network is paralyzed or at least segmented into uselessness.

I'll give 1 BTC to the first person who publishes modified weaponized Masternode code capable of carrying out this experiment.

The sooner we shut this scam down the better.  The pictures of poor desperate Venezuelans and retarded Iowan children being OneCoined trigger my sheepdog instincts.