The bug would've allowed for the theft of user funds, though an attack would have been massively unprofitable to carry out.