Two transactions converted treasury tokens and liquidity positions, while a third pulled 550,000 X from a Uniswap pool. The Ethereum attack remained ongoing.