The bug comes from Yearn Finance's version of USDT, called yUSDT, which has been broken since it was implemented 3 years ago. This allows miners to mint 1.2 trillion yUSDT from just $10,000. This amount was then withdrawn by swap to other stablecoins.
