The major hack may be the worst attack to hit the NFT community in its history, with millions of dollars in potential losses.
The way I read the article, the "worth millions" is the sum of the ransom demand.
The funny part is that the exploit is in the "smart" contract, ya know the thing that the blockchain keeps secure by forbidding any updates or patches.
Another interpretation is that it's all an insurance scam were something worthless is "stolen by hackers" and then claimed to be worth millions for the insurance claim.
But surely nobody in the "well known as impeccably honest" NFT world would ever do something like that!