Potential Security Risks of OTP Authentication