$1.88M Reportedly Drained in TransitFinance Exploit that Exposes Hidden Risks of Legacy Smart Contracts