Private key compromises are primarily the result of internal platform negligence