On Feb 22, 2019 a new Active BP (games.eos) did not update the blacklist for EOS mainnet accounts. The blacklist is used to freeze accounts that were hacked. Due to the blacklist not updated, one of these frozen account’s attacker managed to transfer 2.09 million EOS.

https://t.me/eosgo_news/632