Crypto audits and bug bounties are broken: Here’s how to fix them