BlockSec stated on social media that KyberSwap was attacked due to price manipulation and double liquidity counting. The attacker borrowed a flash loan and depleted the lower liquidity pool. By executing swaps and changing positions, they manipulated the current price and price movements of the victim pool. Ultimately, the attacker triggered multiple exchange steps and cross-quoting operations, resulting in double liquidity counting and depleting the liquidity pool.