Broken code traps $24m of Lido staked SOL — and holders want their tokens back