The estimation is that an attacker gained control of price oracles, leading to drained liquidity from altered price information. Within the first hour after the hack, Shou discovered that KiloEX suffered from a total vulnerability, where anyone could set up the price oracle to any value.