AI can now drain crypto contracts in seconds, so why is finding bugs still its biggest weakness?