How bitcoin cold wallets lost $70 million in an attack that never touched the devices