There was an "interesting" thread yesterday by some people who were surprised that static analyzing a contract and a once-over code review weren't enough to prevent the author from instantly stealing all their money.

https://twitter.com/cat5749/status/1476813266462539779