The security incidents occurred days after a researcher discovered a critical bug in a Virtuals Protocol audited contract, which was fixed.