Cosmos Labs says it wrongly cleared the bug behind a $5.7 million six-chain hack