X100 governance flaws trigger $6M loss due to a flash loan