FatMan

We’re really calling devs out directly for incidents and vulnerabilities now?

You obviously have no grasp on what goes into building DeFi or crypto-native projects. I don’t know a single dev who hasn’t had one vuln slip through.

It may be caught during an audit / etc, but it reflects on the organization and it’s practices, not the individual. No dev should have the keys to the kingdom, hence you don’t blame the dev for a mistake that made it into prod.

Do devs in your project slip in fixes without disclosing to users that a bug existed, had been patched, and probably caused millions in losses? Is that normal in the industry?

I mean we’ve had our share of bugs which are disclosed the vast majority of the time, but it’s definitely a different world in on-chain gaming w/ much less at stake. Mistakes happen, even with great testing practices, reviews and audits.

I’ve been fortunate enough to have caught mistakes in DeFi work before shipping though, bur I honestly count that as luck.