An unprotected flashloan callback was exploited on this contract: https://etherscan.io/address/0xc1d7d3660354185b224fb98c27cbfdafc4f2b249

The victim EOA delegated USDe and other tokens to the vulnerable contract 4 hours ago: https://etherscan.io/tx/0x8bbb18a9c68e391b8b5c489e95d6e71c1908461fddcc33d5cca3c3e1cfb5b5e3#eventlog

Attacker looted $1.1 million, swapped to eth and dispersed to multiple wallets.

EDIT: Not a Pendle hack!