Coldcard's biggest security failure may have cost $70M