Hacked vanity addresses have been used to steal tokens worth $500,000 from layer-2 scaling solution, Arbitrum.