Lien Finance lost $542K in USDC after attackers exploited a smart contract flaw that enabled minting unbacked bond tokens.