Thorchain's signing library was temporarily made closed-source following an exploit