The EOS Pizza team announced that their DeFi platform has been hacked by the account named itsspiderman, deprived of a total of $5M worth of tokens. Block Producers and Blockchain Security company SlowMist is already working to analyze the case and attempt to recover the funds.
According to initial reports shared by the Pizza team, the hacker was able to use an exploit on eCurve to mount infinite Tripool tokens and use them as collateral on PIZZA to withdraw all the funds from the platform. The hacker used the account "itsspiderma1" to deposit as much as 12,000,000 Tripool tokens on Pizza, and then transferred the funds to his second account itsspiderman.
In the meantime, the hacker itsspiderman has already transferred the stolen funds to hundreds (if not thousands) of accounts to make any recovery of the funds even more difficult.
In the image you can see just a few of the accounts used to distribute the funds.
Sources: