We have a couple docs explaining how to build smart contracts securely. I also remember there were a couple public hacks for which we could dig up the post mortem. Ideally we could feed all of it into a vector store (or directly into a prompt?) and use it to audit contracts