Bug Hunting Isn’t Enough; DeFi Code Should be Financial-Attack Proof: Quantstamp's Richard Ma

bZX exploits showed financial attack vectors should be included in smart contract audits and tests, Ma said.

Hello Defiers! Last week DeFi suffered its biggest test yet: Two exploits worth almost $1 million, which leveraged some of the ecosystem’s most distinctive features, composability and flash loans. As tensions from the very immediate aftermath of those days ease, it’s time to think about some of the deeper lessons the space can take from these exploits.…