The attacker made use of an exploit that allowed entire liquidity pools to be withdrawn as “fees.”