Hegic exchange just entered mainnet. But its smart contracts contained a bug that locked up user funds. An April security audit shows that this vulnerability was known well beforehand.