Attacker manipulated the DOP token price on Ploutoz Finance and used it as collateral to borrow CAKE, ETH, BTCB and other assets. After exchanging borrowed tokens to BNB via ParaSwap and PancakeSwap, attacker cashed out through Tornado Cash. Initial funds for the attack were withdrawn from Tornado Cash, indicating pre-planned coordination.