Fifteen distinct attackers are draining vulnerable Coldcard wallets, resulting in over $130 million in stolen Bitcoin from thousands of wallets. The ongoing firmware flaw exploitation raises major security alarms.