DEX platform SushiSwap has suffered more than $3.3 million in losses after a hacker exploited a bug in a smart contract.