Sort:  

It was coindirect! I posted about the hack here

Didn’t want to name and shame just yet until all info and avenues are exhausted I’ll post an update once I know more