​

Reportedly, the attacker was originally involved in developing the contract for the Infini project. However, after delivering the project, they secretly retained admin rights. Over 100 days later, the attacker funded their address through the Tornado Cash mixing service, sent a small ETH transaction for gas, and exploited the contract, draining all funds from the platform.