Having been on the receiving end of a bug bounty program and audits, this is easy: Severity: High - Permanent freezing of funds. ETH sent to the contract via self-destruct calls cannot be withdrawn from the contract and is cannot be recovered.

Pick a coin, click holders, sorted list of wallets with that coin.

"You can always make things worse in an emergency" - Hoot's law It's always important to move at the right speed during a DeFi incident response. Everybody is willing to pull big levers, and you need to make sure you don't error.

The number of bugs found in your code is a good indicator of the number of bugs left in your code. More auditors should say this when its true:

The most basic bug finding skill is splitting up the code into every possible execution path, and then checking each one. Bonus: Each code universes created by splitting if's is simpler and easier to check than the original

No context chart

One of the positive effects of crypto currency: Whenever a world leader gets their twitter hacked, instead of trying starting a war, hackers just try to get people to send them money. Much lower overall cost for civilization.

1/ I found an AMM bug in screenshot in my X feed. ZAMM is a hyper gas-optimized AMM. A malicious user can create a new AMM/Coin pair multiple times, allowing them to stash away hidden LP tokens to later rug the pool. Here’s how the bug works:

Because AMM's are both self powered oracles, and magical machines for turning one asset into other assets according to certain rules, there's a lot of benefit to building things that aren't obviously AMMs as AMMs.