Two smart contract auditors miss a Penpie bug that resulted in a $27M exploit, Pythia Finance attacker claims way too many rewards: Crypto-Sec