Bad actors are actively exploiting this flaw to steal funds from affected wallets on multiple blockchains, they say.