Lawson BakerHead of Project Zero at TokenSoft Source
Also, I agree that stablecoins represent a simpler product to audit. However, these organizations (i.e. exchanges) are very complex. TUSD (i.e. Trust Co and Dev/Issuer Co separate) is likely a safer approach than (exchange co and Dev/Issuer Co being combined).
