Reports showed four security companies conducted 11 audits of Balancer's smart contracts starting in 2021, but a bad actor was still able to drain millions in staked Ether.