Microsoft exposed a critical intent redirection flaw in EngageLab's Android SDK, silently threatening over 30 million crypto wallet installs.