bZX exploits showed financial attack vectors should be included in smart contract audits and tests, Ma said.