Monad Airdrop Marred by Critical Vulnerability Leading to User Fund Diversion