For example, this is the writeup of the DeFi Euler hack yesterday by one of the sites listed auditors, who didn't actually audit the code that caused the bug...
https://medium.com/@omniscia.io/euler-finance-incident-post-...