Risks of Vanity Addresses in Cryptocurrency: A $500k Hack from Arbitrum's Airdrop