This incident occurred despite having received an audit from smart-contract auditor CertiK.