Lost $650k due to iCloud and MetaMask vulnerability