The exchange may have failed to recognize that it was minting XEN tokens on behalf of the attacker, per analysts.