Hackers manipulated the price of a small token and used an oracle vulnerability to borrow millions in assets from a lending platform. The DeFi protocol compensated users and upgraded, but the hackers remained free.