Code isn't law. The article above does a bad job of explaining it and makes it sound like it was just a weekend bug find. It wasn't a bug, it was them setting up a bunch of fake entities misdirect funds.

https://arstechnica.com/tech-policy/2024/05/sophisticated-25m-ethereum-heist-took-about-12-seconds-doj-says/