Bittrue exploited for $24.4 million in tokens