OptiFi Program Incident Report

#1

Post by gscott » Thu, Sep 01, 2022, 7:05 AM UTC

OptiFi Program Incident Report
medium.com

Re: OptiFi Program Incident Report

#2

Post by krageon » Thu, Sep 01, 2022, 7:59 AM UTC

Dev edits on live, makes mistake. Nothing to really see here.

Re: OptiFi Program Incident Report

#3

Post by dan-robertson » Thu, Sep 01, 2022, 8:02 AM UTC

Can you change the title of this submission to match the title of the post please? Normally people change titles when the original is sensationalised however the opposite is true in this case.

Re: OptiFi Program Incident Report

#4

Post by nishs » Thu, Sep 01, 2022, 8:04 AM UTC

krageon wrote: post #2

Dev edits on live, makes mistake. Nothing to really see here.

I think there are some lessons that can learned from this. For example, the command line:

  solana program close

didn't seem to sufficiently represent the destructive nature of the action.

The program's designers should likely have chosen the verb "shutdown", instead of "close".

Re: OptiFi Program Incident Report

#5

Post by bhaak » Thu, Sep 01, 2022, 8:08 AM UTC

For all its flaws (and there are countless) the one thing about the show cryptocurrency space that stands out to me as a programmer is that programming errors can be suddenly very costly (granted, in this case it was more of a DevOps blunder).

Being able to very easily put a price tag on sloppy programming is intriguing to me.

Re: OptiFi Program Incident Report

#6

Post by Me163GermanSoup » Thu, Sep 01, 2022, 8:11 AM UTC

Man, if only there was a central authority to appeal those mistakes.

Re: OptiFi Program Incident Report

#7

Post by pavlov » Thu, Sep 01, 2022, 8:12 AM UTC

bhaak wrote: post #5

For all its flaws (and there are countless) the one thing about the show cryptocurrency space that stands out to me as a programmer is that programming errors can be suddenly very costly (granted, in this case it was more of a DevOps blunder). Being able to very easily put a price tag on sloppy programming is intriguing to me.

When the price tag is “everything you own”, how is this an improvement? Who wants to give over their financial life to a computer program?

This aspect of crypto is a 1960s paranoid computer fear come to life, and somehow it’s often presented as an improvement over the existing system of human checks and balances.

Re: OptiFi Program Incident Report

#8

Post by bdcravens » Thu, Sep 01, 2022, 8:13 AM UTC

nishs wrote: post #4

krageon wrote: post #2

Dev edits on live, makes mistake. Nothing to really see here.

I think there are some lessons that can learned from this. For example, the command line: solana program close didn't seem to sufficiently represent the destructive nature of the action. The program's designers should likely have chosen the verb "shutdown", instead of "close".

While it may not accurately represent what it does, "destroy" may be a better fit.

Re: OptiFi Program Incident Report

#9

Post by mellosouls » Thu, Sep 01, 2022, 8:14 AM UTC

From the article:

Lessoned we learned harshly EVERY DEPLOYMENT NEEDS A RIGOROUS PROCESS AND SINGLE POINT FAILURE CAN BE AVOIDED. PLEASE DON’T RUSH LIKE WHAT WE DID, ESPECIALLY FOR DEFI PROJECTS.

Best wishes to the company and individuals involved for recovery of assets and success going forward.

Re: OptiFi Program Incident Report

#10

Post by returnInfinity » Thu, Sep 01, 2022, 8:16 AM UTC

bdcravens wrote: post #8

nishs wrote: post #4

Earlier quoted context omitted.

I think there are some lessons that can learned from this. For example, the command line: solana program close didn't seem to sufficiently represent the destructive nature of the action. The program's designers should likely have chosen the verb "shutdown", instead of "close".

While it may not accurately represent what it does, "destroy" may be a better fit.

this is better

solana program lose-all-money