The deployer account changed an Alex contract’s implementation address, and multiple tokens were subsequently drained from its bridge.