Citi mistakenly credited a client US$81 trillion instead of US$280, exposing critical flaws in its risk controls.