An Arbitrum-based algorithmic stablecoin project has fallen prey to a smart contract exploit, seeing $2 million stolen from users.