BTC's security model is broken