Emergency response after a hack or unauthorized transfer: protect remaining assets, preserve TxIDs, and prepare exchange freeze requests.