The theft occurred on-chain with smart contract execution, not with their platform. The money was stolen directly from the hot wallet.

"massive" is relative, for Binance this amount could be a few % of a normal day.