First introduced back in 2015, ERC-20 tokens are full of gaping security holes, with little chance of a fix any time soon.