Coinkite published a new update on the ColdCard vulnerability. They say the bug "lived at a boundary between two unrelated submodules, not in the parent code, and not in the cryptographic or Bitcoin-...