Dexible aggregator hacked for $2M via ‘selfSwap’ function