So-called ‘white hat’ hackers stole 4,000 ETH and $2 million in USDC before the team took action.