Dough Finance loses $1.8M in flash loan attack