The now-patched vulnerability could have enabled an attacker to extract a full private key, bypassing all of BitGo's security features.