The NFT game had embedded malware that exploited a Chrome flaw to steal wallet credentials on a large scale.