Last year, a client came to us after losing close to $400,000 from a contract they'd deployed three weeks earlier. It took me about 40 minutes to find the vulnerability. An unchecked external call.