$285M exploit