Hackers exploited a Dolomite exchange contract, stealing $1.8 million by manipulating user approvals and converting USDC to ETH.