The suspected cause is a private key compromise of one owner in the minting multisig account, said Blockaid.