The exploit involved an attacker using compromised admin privileges on a smart contract, according to security analysts.