Developer gets $2 mn reward for removing a bug that could cause losing billions of tokens