Security researchers warn that deprecated smart contracts can remain vulnerable long after projects stop maintaining them.