Pirate Chain says an exploit created 39.8 million ARRR. NonKYC blocked suspicious withdrawals as the team warned users against transfers and worked on recovery.