The Coldcard hardware wallet firmware exploit occurred across three distinct waves of attacks