wallet security vulnerabilities