Static analysis demos are usually rigged. You pick the bug, you write the check, you show the check finding the bug. Nobody learns anything.
Source: [Dev.to](https://dev.to/aioilshield/we-scanned-wormholes-bridge-as-of-the-day-before-the-2022-hack-it-found-the-bug-then-we-scanned-3ond)