Polkadot treasury loses $1.38M after XCM fix missed production release

A security patch applied in testing but not deployed to production let an attacker drain about $1.38 million from Polkadot's dotUSD stablecoin pool, adding to DOT's long slide and a proposal to cut its validator set.