USDC vulnerability