The simple truth, it’s rarely the attack, it’s the assumption.

5/5- There was no upgrade path when assumptions broke.

4/5- State wasn’t fully updated before external calls, allowing re-entry.

3/5- Functions were callable by default, and roles weren’t locked down in time.

2/5- Gas costs were ignored early and ended up pushing real users out.

1/5- Tests covered the happy paths, not how contracts behave in production.

Most smart contract failures were not unpredictable. They were unnoticed. Which on-chain signals do you think teams still underestimate the most? A few thoughts below 🧵

When someone suggests manual smart contract execution.

Happy New Year🍀.

Ending the year with gratitude and good energy.🎄