The lawsuit stems from a million-dollar exploit in November 2022 that allegedly took place due to a private key leak.