What are the common vulnerabilities in Web3 wallets?