StarsArena announced that attackers were draining funds through a loophole, but the contract has been patched to prevent further damage.