New auditor tip: For many protocols, fooling code to think that it has more or less money than it actually does is just as critical of a bug as being able to make it send an attacker funds.