#Coldcard vulnerability explained