Exploiting JavaScript Interface for Unauthorized Access in a 'global' cryptocurrency exchange android app

How I exploited an exposed JavaScript interface in a major crypto exchange's Android app to perform authenticated actions like placing trades and deactivating accounts.