According to Certik, the attack was primarily caused by a Hyperbridge gateway vulnerability that let attackers forge messages, compromise the admin role of a Polkadot token contract on Ethereum, and make around $234,000.