Avalanche's 48-hour validator lockup period compromises network security