A quiet signature on a smart contract could empty your crypto wallet, and investigators are now trying to stop it in real time.