Solidity is nothing like js. The biggest security issue in js is weird implicit casting and conversions which aren't an issue in solidity. It's definitely the

Solidity is nothing like js. The biggest security issue in js is weird implicit casting and conversions which aren't an issue in solidity. It's definitely the best language to write smart contracts as over the years simple traps have been eliminated, or are at least well known (the worst remaining one comes from people still using .transfer to send eth, but the method is widely known to be obsolete now). What remains is the actual irreducible complexity of writing smart contracts. The entire compound bug was apparently a typo, > instead of >=. No language can protect against logic errors like that.