At the time of the attack, a significant portion of UST and aUST was locked in smart contracts and not in users wallets. Meanwhile many users withdrew what they could from these protocols back into their wallets. Clarity should be put forward concerning the recommended actions to be taken by users.
Users should be informed about the option between keeping versus withdrawing their UST/aUST from protocols like Mirror, Pylon etc.
LFG should inform if they are able to track users UST when not present in their wallets during the attack.