Ongoing attacker quietly drains multiple lending protocols over the past month, with projects remaining silent on undisclosed exploits.