Truebit has acknowledged a security incident involving one of its smart contracts after attackers exploited a pricing flaw to drain more 8,000 ETH.