How did these two brothers do it?

Can someone explain to me very simply how these two brothers were able to steal crypto from the Ethereum blockchain?

I assume it was ETH that was stolen?

Thanks

https://mashable.com/article/mit-student-brothers-exploit-ethereum-blockchain-25-million