The vulnerability meant that secret recovery phrases were sometimes stored on a user’s hard drive.