The Ankr bridge was exploited through a vulnerability involving already-redeemed deposits, resulting in five withdrawals across five different token types. Three of the stolen tokens were valued at approximately $303,600 combined. At 3:49 a.m. ET, the bridge's pause flag remained set to false, indicating that containment measures had not yet been confirmed and the contract may still have been vulnerable to further exploitation.