Caddick victims secure $3.5 million from negligent auditors