A bug in Bitcoin transactions protocol Segwit could be exploited to trick hardware wallet users into sending their Bitcoin to the wrong address.