Whitehat researcher charts course through Yield DTF auction vulnerability