Disaster was narrowly averted by DeFi protocol Polygon—but one attacker was able to make off with nearly $2 million in MATIC using the exploit.