The attack happened due to a vulnerability in the exchange's SMS multi-factor authentication security feature.
Security News