Nikkk

The market is full of "auditing firms" which just run slither on the contracts and then gave the project owners a pdf to show to the investors, or worse... I had audits mentioning snippets of code not in my codebase...

Just joined, that was an interesting challenge :)

this is great, how would you handle picking a random winner with their probability of winning directly proportional to their ticket count? from their implementation they'd do raffle.participants[randomNumber]

if a public zk-proof of an exploit is given then you raise attention on the contract, and it basically becomes like a CTF, it's likely that someone else might find a solution and behave badly

The "zk proof-of-attack" is a concept I'd love to see evolve, but if a contact with the owners of the project is difficult, especially if the exploit is fairly simple, I think white-hacking is the best way to go