Stake DAO faces an ongoing exploit after an attacker minted 5.4T vsdCRV on Arbitrum and began swapping funds for ETH, researchers said.