A critical vulnerability in a widely used hardware wallet has led to one of the largest cryptocurrency thefts of the year, with losses now exceeding $100 million in Bitcoin.