According to Protos, a legacy auction Keeper contract belonging to MakerDAO was exploited, resulting in the theft of over $500,000 worth of ETH. CertiK's analysis indicates that the attacker exploited a function in the contract that lacked access control, removing 200 ETH. These ETH were won by the Keeper contract with "zero bids" during the "Black Thursday" liquidation crisis in 2020, and four batches of 50 ETH each were never settled, which the hacker exploited. The stolen funds were subsequently transferred out in batches via Tornado Cash.