To be fair, the whole point of "code is law" is that there is no intent beyond the code. The developer may not intend to write bugs in their code but that does

To be fair, the whole point of "code is law" is that there is no intent beyond the code. The developer may not intend to write bugs in their code but that does not change the fact that they wrote it that way. This is much in the same way that by not catching a bug, both the developer and the person accepting the contract are equally at fault. Now is it ethical to exploit a bug in a contract? In almost all cases the answer is no, however that is besides the point as smart contracts are devoid of any ethics or intent. The whole problem with smart contracts is the mindset behind the community. Tech circles far to often follow the mantra "move fast and break things" and this is the issue. If smart contracts were treated like real contracts, then this issue would be largely avoided. Who do you blame for writing a shitty contract? The lawyer. The same should apply for smart contracts. Smart Contracts should be written or at least reviewed by "lawyers" specializing in smart contracts. They should be trained to be able to write contracts that are bulletproof. If the smart contract is defective, they should be responsible just like with normal contract lawyers. If there is a flaw in a contract, there should be a migration strategy for addressing it. Smart Contracts are a developing technology and an extremely powerful one at that and as such they should be used with extreme caution but that does not mean they are a bad idea. The whole problem is that they are being used haphazardly and often for purposes which are far better served by a more benign and low risk solution.