The source code for Crowd Machine, a blockchain-based app builder, contained the private key for the main Crowd Machine wallet allowing anyone with access to the source code to steal funds from the wallet.