A Daml loan workflow can be compiled with one party controlling the amount, duration, and rate without the counterparty’s approval. During our session with @CantonFdn, Hacken auditor Kornel Światłowski described the gap: “The compiler checks that authority is present. It doesn’t check whether the workflow is a good idea.” The same design layer governs data exposure. Adding an observer can reveal the contract and its stakeholders, and removing access later cannot undo the disclosure. Jatin Pandya summarized the consequence: “The more you expose, the more the risk.” We covered these and other workflow design aspects in detail during our webinar. A Daml security audit examines those risks in your own workflow. To help @CantonNetwork builders embed security early on, Hacken is offering 50% off Daml security audits until October 11th. Submit your project scope: