The attacks occurred on ApeRocket's Binance Smart Chain and Polygon networks within a few hours of each other on Wednesday.
Withdrawals and deposits are temporarily paused.
The attacks marks yet another exploit of a BSC-enabled DeFi protocol.
A hacker used PancakeSwap to manipulate the Bunny market and crashed its price to nearly zero.
The protocol said minting has been paused on all contracts while an investigation takes place.
Alpha Finance says the "loophole" has been patched.
The scheme has become common in the fast-growing DeFi sector.