Rain's RainCollateralController admin private key was compromised, allowing an attacker to drain 450,000 USDC from the protocol on Ethereum through the withdrawAsset() function. The incident was part of a larger multi-collateral drain with no underlying code vulnerability.