How ethical hackers with just a $3,000 server found a flaw that could've put $70 billion in crypto at risk