It was a very simple bug, and very simple to fix. Have you seen the size of the witness on the offending transaction? It's 998 * ~66 byte long signatures. The updated value will tolerate a transaction so large it exceeds the block size limit, so it's not going to happen again.