The attacker manipulated the THE token market, borrowed assets, and sold THE, causing a 17% price drop and liquidations, with estimated profits of $3.7-5.8 million.