Curve-Vyper exploit: The whole story so far