The attacker was seemingly given authority to withdraw $41 million from Kiln while unstaking $200,000 worth of SOL.