Venus got wrongfully blamed this time. An hour ago, a certain whale (address ending in 2008) signed a `setDelegate` transaction, granting permissions to the attack contract (hash: https://(bscscan.com)/tx/0x75eee705a234bf047050140197aeb9616418435688cfed4d072be75fcb9be0e2). The attack contract then drained most of the whale's holdings from their address. In reality, Venus wasn’t attacked. Moreover, Venus quickly paused the contract, so the funds are still on the platform and there’s hope of recovering them.