According to ChainCatcher, Pendle announced that all contract operations have been restored and transactions are now normal. The security vulnerability is limited to Penpie and the funds on Pendle are safe.
The Penpie team is working on a post-mortem report, which will be released soon to provide more details.