The attacker manipulated the spot price of the relatively illiquid MAMO token, increasing the collateral value recognized by Moonwell. The attacker used the inflated MAMO collateral to borrow liquid assets including cbBTC, ETH/WETH, USDC, and wstETH, leaving the lending markets with undercollateralized positions