The Premia Labs attacker locked vault collateral into fake options pools before withdrawing the assets as liquidity into attacker-controlled wallets.