This time, Venus was wrongly accused.
An hour ago, a large investor (ending in 2008) signed a setDelegate transaction, granting access to the address to an attacking contract (hash: https://t.co/RmF52oxKaZ). The attacking contract then took away most of the investor's positions. In reality, Venus was not the target of the attack, and Venus promptly suspended the contract, so the funds remain on the platform and can be recovered.