browser wallet vulnerability