The protocol’s SUMR token fell by over 18% after the incident.