Coldcard's $38M (so far) exploit shakes faith in self-cus...