Exploiting SS7 vulnerabilities to intercept SMS messages with one-time passwords, experts were able to find out the e-mail address attached to the wallet, grab control over it and access the wallet.