“For over 3 hours, attackers were able to take over the chain. All exchanges that received BSV deposits during that time might have been double spent.”