Hackers leveraged a vulnerability in the bitcoin exchange's SMS recovery system to steal cryptocurrency from 6,000 customers.