TranchePool Exploit: A Midnight Rollover Drained $1.01M

How a UTC day rollover booked a scheduled principal payment as received, reopened draw capacity and let an attacker drain 1.013M USDC on Avalanche.