The theft occurred on-chain with smart contract execution, not with their platform. The money was stolen directly from the hot wallet.