TOFR: Graph explaining the issue with unhosted wallets and the liability of the receiver CASP