WAX Bridge Exploit: A Negative Fee Drained ~$90K

A missing sign check on max_fee in WAX's eth.token withdraw action let an attacker bridge out ~$90K in USDC, USDT, DAI, WETH and WBTC for free.