A one-block Ethereum block reorganization removed an unconfirmed 10 Ether deposit, triggering a bug that issued duplicate refunds