An attacker exploited a bug in Blockstream's Elements open-source software to mint approximately 4,000 unbacked LBTC tokens