It wasn't a Solana hack in fact.
The attacker conducted supply chain attack via injecting malicious code sending seeds onto third server from dependencies used in various wallet projects.