Eight Field Techniques for Smart Contract Auditing Drawn From Refuting One's Own Findings

A developer describes a 24-round audit of a lending and automation codebase, using the experience to derive practical methods. The author recommends targeted reading of mechanism contracts such as auctions, leases, and escrows instead of linear top-to-bottom review. Prior audit fix identifiers in comments are presented as a guide to where earlier reviewers concentrated their attention, while certain require checks are noted to look like protections without being one. The piece also covers rounding direction choices for sub-unit remainders, ordering invariants between paired state variables, and treating external callback points with scrutiny. Finally, the author stresses hypothesis-driven auditing with mandatory self-refutation, arguing that discarding a flawed finding is far less costly than submitting a wrong one.