A hacker appears to have gained unauthorized control over Unleash Protocol's multisig, enabling them to drain nearly $4 million in assets.