The Bancor decentralized exchange has released a smart contract with a critical vulnerability, and is now hacking itself to save user funds from malicious actors.