A five-year-old Coldcard software flaw may have allowed an attacker to reconstruct private keys and sweep more than 1,100 bitcoin, prompting the wallet’s maker to blame the discovery partly on…