Update. A full written announcement will go up over the weekend. We know what happened, but we don't know how.
05 Nov 2022, 04:20
Update
A full written announcement will go up over the weekend. We know what happened, but we don't know how. Someone was able to interact with the contract but they were also able to overcome a 3/5 signing requirement for the wallet that owned all the tokens, yet none of the authorising wallets show any activity.
We have bought in some significant resources from notable blockchain organisations to help work this out. Right now they are looking to decipher the bytecode from the transaction and see how this was done. It's very easy to jump to armchair conclusions on how but this was sophisticated. The hacker wrote a smart contract specifically for this hack accomplishing a sweep of transactions in one multi-call, bypassing a multi-sig.
As to the funds themselves - it is our intention to reseed the pool, launch yet another token setting back the clock to Sep 15th and the original snapshot so that we can make people whole again. But we won't do this until we work out how a very standard smart contract with functionality similar to hundreds of tokens was opened up like this.