Inside the $280M Drift hack: weeks of setup, minutes to drain