Looks like smart contracts (e.g. wLEO) are still at infancy. Here is a story from medium:

"Writing contracts in Solidity is hard. In fact, it’s super hard and very dangerous. This simple tale of a $1,000,000 contract being live for days without anyone finding a tiny bug (until the hacker did!) is a serious lesson to us Solidity writers everywhere."

Source: Hacking an Ethereum contract

But kudos to LeoFinance team and community to take the bold step for wrapping LEO on ETH. The worst case scenario is that the stolen 329 ETH or around $120K may never be recovered. However, total value of LeoFinance could be in millions with upcoming upgrades.

Hopefully, LeoFinance will come up with a good compensation plan for the members who were affected in UniSwap and take a heart in lesson from this hacking.

Hecker's final gateway ETH address is: https://etherscan.io/address/0xa305fab8bda7e1638235b054889b3217441dd645#comments

It is strange that this address is used for years for phishing and Binance has not tagged it while other exchanges has responded previously. Source: DragonEx Hacked — Users Crypto Transferred and Stolen