Coldcard users are urged to replace vulnerable seeds after Galaxy traced 1,367.05 BTC, worth $88.6 million, across 4,585 addresses.