We DDoS'd Ourselves on Launch Day
At 17:00 UTC on cutover day, a re-engagement cron pushed notifications to ~100K freshly migrated users. Every device token belonged to the old Firebase project, every call failed, every failure retried, and the whole backend was pinned to one instance. Nobody attacked us. We did.