The attacker reportedly flashloaned 350M $Dai, 500M $USDC, 150M $USDT, 32M $Bean, 11.6M $LUSD 2 from three dexes before adding the amounts to Curve.fi with BEAN for the governance voting.