15M USD lost with a hack just like that!

This was one of the most costly bugs in history. Did anyone get a refund from the treasury? They should, right?