Core Insights - Unleash Protocol announced unauthorized activity in its smart contracts, leading to the extraction and transfer of user funds [1] Summary by Categories Incident Overview - An external address gained management permissions through Unleash's multi-signature governance mechanism and executed an unauthorized contract upgrade, triggering unapproved asset withdrawals [1] - Affected assets include WIP, USDC, WETH, stIP, and vIP, which were subsequently transferred to an external address via third-party cross-chain infrastructure [1] Governance and Security - The incident appears to stem from issues within Unleash's governance and permission framework, with no evidence indicating that Story Protocol's contracts, validators, or underlying infrastructure were impacted [1] - Unleash has suspended all protocol operations in response to the incident [1]