Millions of CRV tokens were taken minutes before a white hat mission to protect the funds was set to take place.