Unleash Protocol reported $3.9M in losses from unauthorized withdrawals