Stars Arena is facing a critical vulnerability that poses a risk to over $1 million locked in its smart contract.