Blockchain security startup CertiK said Telegram’s desktop application poses risks to use due to a media auto-download feature, but the social network challenged such claims.