Could you elaborate on the potential risks associated with One-Time Passwords (OTP) in the context of cryptocurrency and financial transactions? How might a malicious actor exploit weaknesses in OTP systems, and what measures can users take to mitigate these risks?