Multichain asks users to revoke approvals amid ‘critical vulnerability’