According to @PeckShieldAlert, Unleash Protocol on Story Protocol suffered an unauthorized drain with an estimated ~$3.9 million loss, after which the exploiter bridged the proceeds to Ethereum and deposited 1,337.1 ETH into Tornado Cash (source: @PeckShieldAlert). According to the official incident notice from Unleash Protocol, an externally owned address obtained administrative control via Unleash’s multisig governance and executed an unauthorized contract upgrade that enabled unapproved asset withdrawals; impacted assets identified so far include WIP, USDC, WETH, stIP, and vIP, and all Unleash operations have been paused while the investigation proceeds (source: Unleash Protocol official incident notice on X). Unleash also stated there is no evidence that Story Protocol contracts, validators, or underlying infrastructure were compromised, and the impact appears limited to Unleash-specific contracts and administrative controls (source: Unleash Protocol official incident notice on X). For trading risk management, Unleash advised users to refrain from interacting with Unleash Protocol contracts until further notice and noted they are evaluating remediation and recovery measures, with on-chain data preservation and coordination underway (source: Unleash Protocol official incident notice on X). The on-chain route of 1,337.1 ETH to Tornado Cash indicates obfuscation of flows tied to the exploit, as flagged in real time (source: @PeckShieldAlert).