Concerning the transfer() function of a StandardToken: Since DAO "white hack" I know that it's important for contract security to substract the value first and then add it to the recipients balance. My assumption was that the same is true for transferFrom(). But as I compared a few different token contracts, I found there's no consistency:
HackerGold - first sub then add
FirstBlood – first add then sub
Which one is correct?