A supply-chain attack against Copay cryptowallets through an open-source library enables bitcoin theft.