I cannot imagine letting such insanity happen.
You allow shorts on your exchange, but you dont have controls in-place?
My gosh, have some php email() when >1M in shorts is happening. Send it to a CEOs personal email, or something... (let alone have functions in place to force a realization)
I really am having a hard time understanding how this happened.