Analyze the Coldcard hack at the source-code level. Review the publicly available firmware and related code to explain the vulnerability, attack vector, root cause, exploit chain, security assumptions that failed, and potential mitigations