A pretty icon turned out to be a decoy. An Ethereum developer lost everything in one click.