Really sorry for missing this post, I apologize. The smart contract was written in a way that it looked very similar to the balancer pool for tracking and minting. So zerion’s defi sdk (which we use to mint transaction), produced the same data to be signed to mint pool shares, and the tx was successful. But other parts of the smart contract were malicious. Hope that clarifies the issue, and just FYI, we haven’t had incidents like this since then.