While auditing ambitfinance I wanted to give you all a little insight on what is important if you audit a codebase which has a few cross-contract interactions.

As you can see in the picture, it is important as a first step to highlight all incoming and outgoing calls for the specific contract you are auditing at this moment.

I always do that by visualizing these calls, as you can see. The next step will be to follow all incoming / outgoing calls and inspect which to which state transitions they lead in the related contracts.

A corresponding post to this topic will come within the next few days.