OP_NET (Bitcoin L1 smart contracts, $5M raised) silently patched a critical bug that let anyone drain any token holder on mainnet — then offered the researcher $200