Are DEXes Impregnable for Hacking? The Spartan Case Proves the Opposite