"Just got word of a leaked exploit kit that's been targeting crypto exchanges. Apparently, it's allowing hackers to bypass multi-factor auth and steal users' private keys. Can anyone confirm if this is legit and if there's been any major exchanges affected so far?"