For asynchronous Lambda invocations with an on-failure destination configured, what happens to an event after all retries fail?

Async invocations get two automatic retries; after that, the event goes to the on-failure destination (or a DLQ if configured the older way). Destinations are generally preferred over DLQs because they include the error context and support more targets.