The 0x vulnerability, explained