The case studies used here are the smallest of small fries and the implementations are very simple. but similarly simple implementations have been used in more exciting and destructive cases. like the "squid game" coin. the squid contract actually had almost no functionality in it. Squid code said, roughly: "I am a coin, you can trade me. For all other functionality, I do whatever [some other address] tells me to do". Then, when you look at that other address, its code there is unverified, & when decompiled reveals fee-setter shenanigans and stuff of that nature.
The case studies used here are the smallest of small fries and the implementations are very simple. but similarly simple implementations have been used in more exciting and destructive cases. like the "squid game" coin. the squid contract actually had almost no functionality in it. Squid code said, roughly: "I am a coin, you can trade me. For all other functionality, I do whatever [some other address] tells me to do". Then, when you look at that other address, its code there is unverified, & when decompiled reveals fee-setter shenanigans and stuff of that nature.