Gamee's deployer private key was compromised via an unsecured GitLab environment, enabling an attacker to gain control of the project's deployer address on Polygon. The attacker exploited recoverERC721s() function bypass protections and stole approximately 600 million GMEE tokens worth ~$7M at the time.