Traditional rating agencies should assess smart contract code risks