The Problem

The gap between specification and implementation

Smart contract security rests on an assumption that a program matches its intent. The specification is a document, the implementation is code, and the difference between them is where value is lost. Every smart contract platform in production today creates that difference by construction, because its architecture requires two artifacts: a statement of what the contract should do, and a program that is supposed to do it.