Why have smart contracts indeed, if executing the code in the contract is called a "hack." Perhaps in the case in the article a trusted third party would have been superior and there wouldn't be $10M missing.