I don't know of any case where any new vulnerability was found in the context of such a source code review.