Security audits are insufficient to protect DeFi protocols from operational failures