Field notes on smart-contract security — how we find, prove, and explain real exploits, and what we're building to close the gap between developers and auditors.