Hacked on Web2, Rescued by Web3: A True Story