Ethereum clients that still haven't patched known vulnerabilities pose a security risk to the entire network, according to new research.