Unciphered withheld a massive secret about security vulnerabilities in old crypto wallets from the public for 20 months straight.