Tangem said it resolved a bug in its app that risked exposing private keys, but users have criticized its muted response.