A minor settings mismatch in Aave's pricing system briefly made a popular token look cheaper than it actually was, and that was enough to wipe out $26 million in user positions.