PAID Network exploiter nets $3 million in infinite mint attack

After an attack at one point worth nearly $180 million, community members are left wondering if the exploit is a "rugpull" or a security lapse.
Source: PAID Network exploiter nets $3 million in infinite mint attack (https://cointelegraph.com/news/paid-network-exploiter-nets-3-million-in-infinite-mint-attack)
Would appreciate your opinion about this