A bug in the protocol’s newly-deployed iBTC-aUSD liquidity pool left the door wide open for hackers to exploit.