Thetanuts Legacy Index Vault Zero-Cost Remint Exploit

The attacker flash-loaned TN-IDX-USDC-PUT, redeemed the basket once, then called mint 37 times while every basket-token transfer rounded to zero, using the unbacked shares to repay the loan and keeping the redeemed vault assets.