Earlier quoted context omitted.
Well, same thing goes to paper note forgery.
Except that, for the moment, paper note forgery is illegal but creating "extra" crypto coins doesn't seem to be.
Zcoin implementation bug enabled attacker to create over 500K Zcoins
21–30 of 223 posts
Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins
#22From the blog post explaining the bug, https://zcoin.io/language/en/zcoins-zerocoin-bug-explained-i... , how is that not a "useless statement has no side effect" warning?
Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins
#23> If the attacker managed to liquidate their Zcoins at an average price of $1.25, they may have netted themselves upto USD 750,000. If you are a skilled programmer / security expert / mathematician, crypto currency exploit creation seems to be an extremely lucrative hobby.
Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins
#24Im curious. Is this actually illegal? Is there any requirement on how valid crypto currency is created? I understand the network could implement a fix and prevent future transactions or even roll back old ones if there's enough desire, that's what democracies are about right? But was there anything illegal about creating and then trading them? A rollback would hurt the exchanges, but if they didn't already have somet…
Not the same, but it reminded me of years ago, I had £50 deposited in to my account, by mistake, a couple of months running. I asked my girlfriend's dad - who actually was AL (WAL?) - if I could keep it. He said it would be like someone parking their car on my driveway and leaving the keys in the ignition. Inconvenient, yeah, and I don't want it there - but it doesn't make the car mine.
Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins
#25Earlier quoted context omitted.
This could probably be spun as a violation of the cfaa. IANAL, but the practical interpretation of that seems to be "don't do bad stuff using a computer", kind of like mail fraud but worse.
> This could probably be spun as a violation of the CFAA I'm not sure there's much that couldn't
Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins
#26Earlier quoted context omitted.
Well, same thing goes to paper note forgery.
Except that, for the moment, paper note forgery is illegal but creating "extra" crypto coins doesn't seem to be.
Plus, the language in 18 U.S.C. § 1030(e)(2) (courtesy of CFAA) refers specifically to "any computer, when [it affects] use by or for [a] financial institution." And later it mentions "...affecting interstate or foreign commerce or communication...". This statute is one that gives so much leeway to prosecutors that it's frequently abused.
Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins
#27Earlier quoted context omitted.
Except that, for the moment, paper note forgery is illegal but creating "extra" crypto coins doesn't seem to be.
You're never beyond the reach of a civil suit. If you identify yourself with the scheme and you're in the same country where there's adoption, you could be easily targeted. Plus, the language in 18 U.S.C. § 1030(e)(2) (courtesy of CFAA) refers specifically to "any computer, when [it affects] use by or for [a] financial institution." And later it mentions "...affecting interstate or foreign commerce or communication..…
Perhaps the next generation of cryptocurrencies can have a simple EULA that prohibits exploitation and can be used to firewall off stolen coins.
Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins
#28Earlier quoted context omitted.
> used to ensure bugs like this...do not occur Then compensate for that. Create a pool that pays out for each year without vulnerabilities.
If there are vulnerabilities, those vulnerabilities will be exploited. That will reduce the currency value and the value of their 'founders reward'
Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins
#29Earlier quoted context omitted.
You're never beyond the reach of a civil suit. If you identify yourself with the scheme and you're in the same country where there's adoption, you could be easily targeted. Plus, the language in 18 U.S.C. § 1030(e)(2) (courtesy of CFAA) refers specifically to "any computer, when [it affects] use by or for [a] financial institution." And later it mentions "...affecting interstate or foreign commerce or communication..…
I would really like to see this happen. Without an EULA, is it even possible? Perhaps the next generation of cryptocurrencies can have a simple EULA that prohibits exploitation and can be used to firewall off stolen coins.
Government censorship of coins or transactions is an attack vector, not a feature.
Re: Zcoin implementation bug enabled attacker to create over 500K Zcoins
#30Earlier quoted context omitted.
You're never beyond the reach of a civil suit. If you identify yourself with the scheme and you're in the same country where there's adoption, you could be easily targeted. Plus, the language in 18 U.S.C. § 1030(e)(2) (courtesy of CFAA) refers specifically to "any computer, when [it affects] use by or for [a] financial institution." And later it mentions "...affecting interstate or foreign commerce or communication..…
I would really like to see this happen. Without an EULA, is it even possible? Perhaps the next generation of cryptocurrencies can have a simple EULA that prohibits exploitation and can be used to firewall off stolen coins.
> next generation of cryptocurrencies can have a simple EULA
This is anathema to the nature of cryptocurrencies, all (?pretty sure all that matter anyways) of which have Open Source implementations.
Really, most cryptocoins which are worth anything have already had a big market cap "bounty" that has effectively proven their safety.
We don't need a EULA. Like I said, you could maaaybe sue for damages. Unfortunately there's no easy way to undo the impact to a coin's reputation once it's shown to have a weakness like this. Even once the bug's patched and the nodes all get back on board, exchange rates will suffer for a long time.
[1] https://en.wikipedia.org/wiki/Title_17_of_the_United_States_...