CertiK found a security flaw in WorldCoin's code that could allow unauthorized access to become an Orb operator