Why Bcrypt Can Be Unsafe for Password Hashing?