The decentralized finance app lost nearly $4m thanks to an interaction between an old bug and a new input validation vulnerability.
