Metamask developer Taylor Monahan brought the issue to light and said that no one knows how the exploit works yet.