Legacy code exposed vulnerabilities and drained excess funds