In a paid audit, a false positive is not just noise — it's a credibility killer. Hand a founder a "CRITICAL: unprotected fund sweep" that turns out to be safe-by-design, and you've spent your only currency: trust. We run a heuristic scanner over Solidity before a human ever looks at the code.
Source: [Dev.to](https://dev.to/juan23z/5-false-positives-that-fool-naive-solidity-scanners-and-how-to-kill-them-at-the-root-4oel)