That won't stop him from trading the XMR to BTC or otherwise dumping them before you can rewind what he did.
One thing he can do is mix them with other legitimate coins on the XMR block chain before you can fix, thus you have no idea which txs to unwind and which not to.
Geez man you boast that y'all are knowledgeable about the crypto but you fail a basic test on knowledge about your own coin. Lol.
Ad hominem attacks do not suit you.
Facts are not ad hominem.
Just as with the block 202612 attack, we had all exchanges suspend deposits the second it happened. Some suspended deposits leading up to it. The fork that was triggered lasted 35 minutes.
Decentralized exchanges can't be suspended. Also you prevent your own investors from bailing out. By saying that now, you are telling them to stampede out of the coin now.
You had better retract that pronto.
If there is an attack we'd checkpoint a fork from the bad block onwards, as we've done with 202612.
And you then unwind all the legitimate trades done after that hurting those who sold early in the attack.
You just can't seem to grasp it is a major event and not something to be so smug about.