Attackers with physical access to a user’s device may be able to see the wallet’s seed phrase, the security firm said.