Live data from Hacker News

Poly Network hacker returns $258M after stealing $600M

forbes.com

81–90 of 303 posts

Re: Poly Network hacker returns $258M after stealing $600M

#81
post #35

I haven't seen any evidence there was in fact a hack at all. A digital contract was used in a way that complied with the contract that the bonehead writers of that contract did not intend. That's it. If bad contract writers get to cry "hack" and beg for their money back there is no point to digital contracts at all. If someone had physically or electronically broken into systems and illicitly copied private keys that…

It’s so funny to me when everyone touts crypto + smart contracts as revolutionary™ then when you follow a system implemented with them to its logical conclusions you have analogs to everything that already exists. Lawyers to audit the contracts for bugs (and yes there can be bugs in a formally verified spec as well), courts to arbitrate disagreements, and an authority to enforce rules when someone finds a security ho…

“Would would anyone need elevator buttons? There are already trained elevator operators everywhere that do the same thing.”

“Why would anyone need light bulbs? There are gas lamps and oil everywhere that do the same thing.”

“Why would anyone need email? There are post offices that do the same thing.”

Re: Poly Network hacker returns $258M after stealing $600M

#82
post #38

Earlier quoted context omitted.

Just because there are similar mechanisms doesn’t mean they haven’t been improved on in some way. Lawyers and courts are notoriously inefficient if this implementation achieves efficiencies, even if the mechanisms are analogous, seems like progress.

> It’s important to remember that when you start from scratch there is absolutely no reason to believe that you are going to do a better job than you did the first time. First of all, you probably don’t even have the same programming team that worked on version one, so you don’t actually have “more experience”. You’re just going to make most of the old mistakes again, and introduce some new problems that weren’t in t…

The joy at a standup when you hear someone talk about fixing bugs they had to fix the first time they wrote the thing in a different language. We learnt nothing

Re: Poly Network hacker returns $258M after stealing $600M

#83

Earlier quoted context omitted.

I have to agree. I was going to counterargue that technically all hacking is executing permissible actions in the sense that the system you're hacking into ends up allowing you to do what you want. That leads to why we have laws around unauthorized access etc., and that leads to digital contracts that need to be interpreted by a human with some ability to enforce their interpretation. So yes. As the main point of dig…

I've wondered about things like this with video games. I played RuneScape a while back and one of the things my brother and I would do is lure unsuspecting players into the wilderness to kill them and take their stuff. That stuff, RuneScape gold, weapons, and armor, has some real world value. We took it from other people, often by lying to them (e.g. "follow me into the wilderness, I'll show you something cool"). Cou…

We used to do this in Habbo Hotel. I don’t know how RuneScape worked back then but in Habbo you could buy virtual furniture dropping their valuables into one of our rooms and then kicking them out and making the room private. So, it is different from your example in that “killing” was by-design meant to take stuff from other people, whereas what we did was closer to “fraud” (good luck regulating that in 2006) as other comment said.

Re: Poly Network hacker returns $258M after stealing $600M

#84

Earlier quoted context omitted.

I have to agree. I was going to counterargue that technically all hacking is executing permissible actions in the sense that the system you're hacking into ends up allowing you to do what you want. That leads to why we have laws around unauthorized access etc., and that leads to digital contracts that need to be interpreted by a human with some ability to enforce their interpretation. So yes. As the main point of dig…

I've wondered about things like this with video games. I played RuneScape a while back and one of the things my brother and I would do is lure unsuspecting players into the wilderness to kill them and take their stuff. That stuff, RuneScape gold, weapons, and armor, has some real world value. We took it from other people, often by lying to them (e.g. "follow me into the wilderness, I'll show you something cool"). Cou…

Lures still exist and apparently work in osrs, but they've gotten far more complicated. Unsurprising as osrs gold still has a real world value. Really its the equivalent of the Nigerian Prince email scam and its ilk.

KempQ on YouTube does a lot of videos on modern luring methods. There's also a guy on YouTube called Hermano, a former Venezuelan gold farmer, who has some interesting insights into the real world value of osrs gold and why Venezuelans do it.

Re: Poly Network hacker returns $258M after stealing $600M

#85
post #58

Earlier quoted context omitted.

I've wondered about things like this with video games. I played RuneScape a while back and one of the things my brother and I would do is lure unsuspecting players into the wilderness to kill them and take their stuff. That stuff, RuneScape gold, weapons, and armor, has some real world value. We took it from other people, often by lying to them (e.g. "follow me into the wilderness, I'll show you something cool"). Cou…

In games we usually separate between exploits and hacks. Exploits are vague but typically things allowed by the game, but not intended (or have for more impact than expected). I believe if you lied in the game that would constitute a written/verbal contract and what you did is fraud. Some games enforce written agreements, others say it's the wild west so too bad, this is role playing by a character, not the person. I…

https://www.pcworld.com/article/152673/virtual_theft.html

Re: Poly Network hacker returns $258M after stealing $600M

#87
post #35

Earlier quoted context omitted.

It’s so funny to me when everyone touts crypto + smart contracts as revolutionary™ then when you follow a system implemented with them to its logical conclusions you have analogs to everything that already exists. Lawyers to audit the contracts for bugs (and yes there can be bugs in a formally verified spec as well), courts to arbitrate disagreements, and an authority to enforce rules when someone finds a security ho…

“Would would anyone need elevator buttons? There are already trained elevator operators everywhere that do the same thing.” “Why would anyone need light bulbs? There are gas lamps and oil everywhere that do the same thing.” “Why would anyone need email? There are post offices that do the same thing.”

It's not too bad to invent the same thing over again based on some new and (potentially) revolutionary technology. It's a try, which is unclear to succeed. What are the alternatives to do? There are some, but working on Cryptocurrency is something valid (even "hot") to do these days.

Re: Poly Network hacker returns $258M after stealing $600M

#88

Someone recently pointed out that we have a "free market" in cryptocurrency, and are now spending years discovering why we have regulations, laws, contracts, courts etc. I love the idea of a digital native currency. But I also love financial protections that have grown up over thousands of years. The mints of each country could solve that tomorrow (is there a FOSS blockchain already that does a "we know there are 1 t…

> I love the idea of a digital native currency. But I also love financial protections that have grown up over thousands of years.

Yeah, this is a contrast/friction that exists in the ecosystem. Some people just want something that is like a "digital native currency" that works kind of like banks today (with the same protections at least) but works across banks/applications and somehow also is at a fixed value.

Others want "decentralized cryptocurrencies" that works the same as described before, but without any centralized control or issuance and without the "protections" as the protections can also be used against people, not just for.

Neither is "right" or "correct", just two different views inhabiting the same ecosystem.

Re: Poly Network hacker returns $258M after stealing $600M

#89

Earlier quoted context omitted.

I think this a lot about our politics now, we seem to want to tear down all the institutions and values that got us here.

> we seem to want to tear down all the institutions and values that got us here. Strike a "we", replace by "rich elites". "Small government" means in practice that most of what governments are doing now with taxpayer money at no-profit will be done by private for-profit companies, at a worse service level, or that regulations/regulatory agencies will be torn down. For the first, just look at private prisons - make a…

Sorry to invoke a No True Scotsman here but if you ask an advocate of truly small government (of which I am one) I very much doubt private prisons would be an example they’d accept as a fair representation of their position. The expansion of criminal law is often in pursuit of and to justify growing government and its reach. By all means end private prisons, they’re only needed at that scale because big government is violating its position and the rights of citizens by criminalising actions it should have no part in.

Re: Poly Network hacker returns $258M after stealing $600M

#90
post #12
post #9

Earlier quoted context omitted.

I love how the crypto community encourages circumventing laws, UNTIL someone steals from them using their own “smart” contract then calls on authorities for help.

How does the crypto community encourage circumventing laws?

Oh pleasssssssssseeee ...

Biggest eyeroll in history.

Post reply on HN