The incident led to an approximate loss of $4.6 million due to a vulnerability in its contract that allowed for balance duplication.