One wrong click, one copied address, and millions vanished. February’s crypto attacks reveal a new kind of vulnerability.