The attacker used a $10 million flash loan from Solana lending pool Solend to drain $3.5 million from the Nirvana treasury.