Bismanonline exposure: One hidden function secretly steals more than $1,000 daily