A vulnerability on the popular Javascript library event-stream, used for streaming data in Node.js applications, affected BitPay’s Copay wallet application. The vulnerability enabled malevolent actors to steal bitcoin ($BTC) and bitcoin cash ($BCH) from accounts using BitPay’s Copay wallet application.