"Look in places that you know better than the devs"
The devs don't know all the edge cases of the protocol that they are built on top of or forked from.
A lot of bugs that I found on Immunefi were bugs where you needed to do something in these deeper layers first to achieve the bad end state.
