Why SlashAuth Failed: Access Control in Web3