CareLink is a telehealth portal where patients book video consults and view lab results. The team recently shipped a new account system with registration and login. During a security review of the authentication module, take a close look at how patient passwords are stored and verified before this goes live for a regulated health platform.

ShopFast is a mobile shopping app where users browse deals, sign in, and pay with saved cards. The Android team added a networking layer with some debugging helpers to track down flaky checkout requests. Review the network module and find the security flaw that ships to production.

SmartVault Wallet is a smart-contract wallet platform. Each user deploys a personal wallet that can be "extended" with plugin modules — small contracts that add features like batch transfers, recurring payments, or DeFi integrations. To keep gas low, the wallet runs module code in its own context so plugins can read and act on the wallet's state directly. Users register the modules they want, then call execute() to run them. Review the wallet's execution path: is running a third-party module really as safe as the team assumes?