Hackers Exploit Crypto’s Weakest Link – and It’s Not the Code