Distributing tokenized fund assets through non-custodial DeFi vaults poses unacceptable smart contract risks