The Coldcard wallet vulnerability was reportedly first revealed on Twitter rather than through an official company announcement