$2.3 Billion Lost in Web3 Hacks. What Needs to Change