A preliminary analysis states six chained bugs let a 23-message transaction drain 48.87 million CACAO, sending the token down nearly 89%.