Web3 firm detects major security flaw in common smart contracts