But a hacker exploited a software flaw and stole about a third of the new DAO tokens.