Few reflections on our @OpusMoney x @code4rena contest now that it's over: Going into the contest, I felt pretty confident about our code. We spend a lot of time on reviews (design & code), have an extensive test suite, plus just before the contest started we wrapped up an audit with a traditional security firm. Oh boy, was I in for a surprise. The wardens revealed 4 highs (two of them really embarrassing that we should've caught 🙈) & 9 mediums. Needless to say, I'm very happy they did; they made Opus better. We've already mitigated all issues found and are working on bringing Opus to mainnet soon🤞 I'm now also a full convert to the open contest way of doing security audits. The ROI is just incredible. C4 is doing an amazing job at amassing talent from all over the world and giving them a venue to apply their skills in a fair way to the benefit of all involved parties. I noticed there are wardens that specialize on certain areas (MEV extraction, financial attacks, mechanism design, etc.) and thanks to C4 you can get them to asses your protocol. There's just no way a traditional firm can offer this level of scrutiny for the same money. There's also a downside to the open nature of a contest. Anyone can submit, hence anyone does. We got a lot of obvious chatGPT generated submissions, a lot of low quality ones (reporting something when it's "works as designed"), etc. People are just incentivized to fill in everything in hopes of getting a reward. Note I'm not criticizing submissions of low severity issues, I agree with @sockdrawermoney here, there's value in those too. I'm just saying there's a lot of garbage. However C4 is doing a pretty good job at filtering that out during the screening process. I'd also like to highlight 0xsomeone who was the judge on our contest. That guy is *amazing*. We were super impressed by his ability to grasp complexities of our protocol and navigate between the wardens' submissions and our comments. What a chad! Finally, this was the first ever Starknet/Cairo contest on C4 so I was also curious how it will go. There was a 3 week bootcamp prior to our audit (thank you @omarespejel @barretodavid @robertkp13) and from what I can tell, it was worthwhile. Sure, there were people who treated it like EVM ("no check of caller address zero" etc.), but the best people understood the platform and tooling and submitted issues with a full PoC built using Cairo & Scarb. Great to see 🙏 So overall I'm very happy with the process and results it bore. I want to once again thank you to all the people involved, it's been a great experience.