Live data from Hacker News

DeFi protocol BadgerDAO exploited for $120M in front-end attack

theblockcrypto.com

141–150 of 151 posts

Re: DeFi protocol BadgerDAO exploited for $120M in front-end attack

#141
post #93
post #50

Earlier quoted context omitted.

AFAIK, cryptocurrency companies are not looking for security experts at all. Users money are free, while company money isn't.

You’re wrong. Every crypto company I’ve worked with has spent significant amounts on security consultants, audits, test nets, and bug bounties.

Not every. I asked them directly.

Re: DeFi protocol BadgerDAO exploited for $120M in front-end attack

#142
post #111

Earlier quoted context omitted.

Where there is no law against killing people, people are free to do that. And when people who want to kill people and have been free to kill people get told they are no longer allowed to, they have also been unhappy about it.

No, there is no freedom to murder people no matter where you are. My freedom ends where yours begins.

You appear to be using the word “freedom” to refer to something other than the ability to act without constraint. The phrase “My freedom ends where yours begins” (and its many variations and false attributions to various famous figures) is one of moral considerations and generally used to argue for what the world ought to be, but it is not and never has been a fundamental — i.e. even when the law falls silent — truth of the reality we actually live in.

Re: DeFi protocol BadgerDAO exploited for $120M in front-end attack

#143
post #66

Once again cryptocurrency shills are disproven in their core belief that they can do finance better than status quo.

Its starting to look like the benefits of decentralized banks lean more in favor of the bank robbers than the bank clients.

Luckily none of the bank clients actually have any intention of moving their banking into DeFi.

They just move some speculation and crime there.

Among the clients nobody innocent gets hurt, as there is nobody innocent.

Now ransomware and such...

Re: DeFi protocol BadgerDAO exploited for $120M in front-end attack

#144

Earlier quoted context omitted.

Its starting to look like the benefits of decentralized banks lean more in favor of the bank robbers than the bank clients.

Luckily none of the bank clients actually have any intention of moving their banking into DeFi. They just move some speculation and crime there. Among the clients nobody innocent gets hurt, as there is nobody innocent. Now ransomware and such...

Not sure I agree. I'm sure there's plenty of innocents who've been forcefully convinced by some crypto zelot, or FOMOed their way into the crypto world.

In terms of normal bank clients moving to a DAO bank or something silly like that, you're right, nobody in their right minds is doing this.

Re: DeFi protocol BadgerDAO exploited for $120M in front-end attack

#145
post #71

Earlier quoted context omitted.

There are definitely takesies-backsies if a majority of validators agree on it.

*if Vitalik agrees on it

Well, no, because the community voted on it, and people decided to run nodes that accept that.

Re: DeFi protocol BadgerDAO exploited for $120M in front-end attack

#146

Earlier quoted context omitted.

Luckily none of the bank clients actually have any intention of moving their banking into DeFi. They just move some speculation and crime there. Among the clients nobody innocent gets hurt, as there is nobody innocent. Now ransomware and such...

Not sure I agree. I'm sure there's plenty of innocents who've been forcefully convinced by some crypto zelot, or FOMOed their way into the crypto world. In terms of normal bank clients moving to a DAO bank or something silly like that, you're right, nobody in their right minds is doing this.

Maybe.

Depends how "innocent" someone is when they are blinded by greed, even if greed fueled by scammers.

Would that same person be culpable if they did as little due diligance before "investing" in more traditional organized crime, lured in by "you can't lose. It's a sure bet, 10x gains!"?

At best the innocents here "invested" in a lottery ticket, and lost in the same way that a non-winning lottery ticket loses.

Re: DeFi protocol BadgerDAO exploited for $120M in front-end attack

#147

Earlier quoted context omitted.

Not sure I agree. I'm sure there's plenty of innocents who've been forcefully convinced by some crypto zelot, or FOMOed their way into the crypto world. In terms of normal bank clients moving to a DAO bank or something silly like that, you're right, nobody in their right minds is doing this.

Maybe. Depends how "innocent" someone is when they are blinded by greed, even if greed fueled by scammers. Would that same person be culpable if they did as little due diligance before "investing" in more traditional organized crime, lured in by "you can't lose. It's a sure bet, 10x gains!"? At best the innocents here "invested" in a lottery ticket, and lost in the same way that a non-winning lottery ticket loses.

Not everything is this black and white. Some people are not motivated by greed as much as misplaced fear that's been stirred up by the crypto folks. Open any crypto discussion and see how many clicks it takes to get to someone panicking over hyperinflation, bank failures, invoking the ghost of 2008, ect. For all their talk of FUD, crypto folks dish the FUD out onto the traditional banking system almost as hard as the traditional banking system dishes it out on crypto.

Mix that with someone who's easily impressionable and anxious, and you get someone who'll likely make some very bad decisions.

Re: DeFi protocol BadgerDAO exploited for $120M in front-end attack

#148

Earlier quoted context omitted.

Can you elaborate on how this event constitutes proof of your claim?

One of the core pillars of cryptocurrency, and DeFi, is that traditional finance is anachronistic, and full of stupid stuff not fit for the modern age. Take the first sentence on ethereum's intro to DeFi: "DeFi is an open and global financial system built for the internet age – an alternative to a system that's opaque, tightly controlled, and held together by decades-old infrastructure and processes. " Lots of the sl…

Thank you for this. I'd also like to add a point somebody else made - contracts being replaced by code might sound cool in a vague "wow future" way, but if you have enough experience with code, it's actually terrifying.

Code can almost always be exploited and broken in a way actual contracts can't. Giant corporations spend tons of money on various security features, only for them to be broken by some 15 year old that wants to play pirated games on his console.

Why would I possibly want to add that risk to my financial life?

Re: DeFi protocol BadgerDAO exploited for $120M in front-end attack

#149

Earlier quoted context omitted.

The same is true for selling poisonous baby milk or wine.

If I want to sell a poisonous wine to an adult that understands the risks and still wants it, then it's none of your business.

So if you want to kill a mentally ill person with their consent, that's also none of our business?

Like was this guy [1] right in what he did and his punishment was unfair?

[1] https://en.wikipedia.org/wiki/Armin_Meiwes

Re: DeFi protocol BadgerDAO exploited for $120M in front-end attack

#150

Earlier quoted context omitted.

One of the core pillars of cryptocurrency, and DeFi, is that traditional finance is anachronistic, and full of stupid stuff not fit for the modern age. Take the first sentence on ethereum's intro to DeFi: "DeFi is an open and global financial system built for the internet age – an alternative to a system that's opaque, tightly controlled, and held together by decades-old infrastructure and processes. " Lots of the sl…

Thank you for this. I'd also like to add a point somebody else made - contracts being replaced by code might sound cool in a vague "wow future" way, but if you have enough experience with code, it's actually terrifying. Code can almost always be exploited and broken in a way actual contracts can't. Giant corporations spend tons of money on various security features, only for them to be broken by some 15 year old that…

Especially since while contracts can be imperfect too, they have a second layer of security in the form of a judicial system, to invalidate/overrule not just "as code", but with common sense and preventing illegal contracts or legally/morally unenforceable clauses.
Post reply on HN