A critical vulnerability in the firmware of Coldcard hardware wallets has led to the theft of tens of millions of dollars in Bitcoin, prompting urgent security warnings for users.