$5 million stolen from Osmosis DEX after attackers exploit a bug