Hackers hijacked Ngrave's app alerts to phish recovery phrases, stealing $2.56M in Bitcoin, XRP and more from 70 crypto wallets.