A major security vulnerability in Coldcard hardware wallets has resulted in over $114 million stolen from self-custody Bitcoin holders who followed strict offline security protocols.