The suspected cause is a private key compromise of one owner in the minting multisig account, said Blockaid.
Read more at Asset Curator