Coldcard bug, upcoming bip110 fork and ecash fork. This is an obvious attack