timbowhiteThe Resolv hack: How one compromised key printed $23M
https://www.chainalysis.com/blog/lessons-from-the-resolv-hack/
Missing from the article - the hacker first compromised Resolv Lab's AWS account, took a private key from KMS that was used to control minting, then managed to extract $25 million into ETH before all protocol functions were suspended.
It's explicitly mentioned in the article:
A step by step breakdown of the attack
Step 1. Gaining Access to Resolv’s AWS KMS Environment
The link was changed, the old one did not mention it (apparently): https://news.ycombinator.com/item?id=47498220