Attackers used the more than three-hour fork window to attempt double-spends against cross-chain swap protocols.