According to Foresight News, Cyvers Alerts monitoring showed that Moonwell's USDC loan contract on the Optimism network was attacked by a flash loan. The attacker used the malicious contract address as mToken to obtain unauthorized token approval.
The attacker obtained funding through Tornado Cash on the Ethereum network, and the stolen USDC has been converted into DAI and stored in the attacker's wallet.