Curve Finance and the Vyper Vulnerability: A Technical Post-Mortem Report