Sonic DEX Hack: Technical Report, Asset Tracing, compensation plan and future plans

Would you mind sharing the vulnerable code section in question, as well as how long that particular code /bug has been operative? was this bug present since launch or introduced more recently?