The Coldcard exploit has become a major hardware wallet security incident, renewing scrutiny of self-custody practices.