wallet vulnerability