Cryptocurrency apps were the most high risk for exposing sensitive information, a reverse-engineering study shows.