You don't have to sign a contract to find vulnerabilities in an API. The thing that you have to obey is the law. Just because we call it smart contracts it isn'

You don't have to sign a contract to find vulnerabilities in an API. The thing that you have to obey is the law. Just because we call it smart contracts it isn't above the laws.