Live data from Hacker News

OptiFi Program Incident Report

medium.com

121–130 of 158 posts

Re: OptiFi Program Incident Report

#121

Commands like that really need a confirmation prompt and a command line switch to override like --do-as-i-say (long form only). Good example of developers being put in an end user's shoes, I hope they learn from that mistake and update their programs.

Sun has a good warning banner on their ZFS appliances. It made you thing twice before proceeding. Shown here: https://news.ycombinator.com/item?id=30195007

Re: OptiFi Program Incident Report

#122

Earlier quoted context omitted.

That guy is a savvy YouTuber, man. He did that because the resulting content has high memetic replication properties. I find the prompt for dangerous ops useful. GitHub will ask you to repeat the name of the repo before you destructive actions, Terraform will ask you to say yes to the prompt. These are all good things.

It's a solid practice in UX design. Physically having to type or copy/paste it in really highlights the action for the end user. There's only so much you can do to stop people setting their own house on fire but something like that puts the onus on them and fairly places the blame where it belongs.

UX is not about putting the blame on someone, but to prevent errors. For this reason confirmations are not really the best practice. Sure, they reduce the number of mistakes by some margin, but they never get it 100%.

The better alternative will be instead of asking for confirmation to ask to explain the intent by picking one of the options or writing it down. Ideally, an alternative must be suggested. This will avoid automatic reaction, because there's no one clear path to the goal.

Re: OptiFi Program Incident Report

#123
post #78

This is one of the biggest flaws in crypto. Small errors can erode hundreds of millions of value. That's when most crypto companies right now are very small. Can you imagine the chaos if crypto were to actually become big and dev count were to grow to 1k+ people spread across multiple offices? There's definite efficiency gains with crypto (a dex like Uniswap can do massive volume with very few developers for instance…

> This is one of the biggest flaws in crypto. Small errors can erode hundreds of millions of value. That's reality. Same thing would have happened if they had put all that cash on a boat, and accidentally sunk it.

Cash, being paper, would probably float.... Sadly for oceanic finance transfers, it's mostly gold, and that stuff sinks fast.

Re: OptiFi Program Incident Report

#125

Can you change the title of this submission to match the title of the post please? Normally people change titles when the original is sensationalised however the opposite is true in this case.

Changed now. Submitted title was "Crypto Dev Enters Wrong Command, Destroys Entire Company"

Re: OptiFi Program Incident Report

#126
post #100

Earlier quoted context omitted.

It’s Solana, so there kinda is. It’s pretty much centralized.

Why is this called DeFi? If a dev can nuke an entire app (intentionally or accidentally) it's not decentralized. Contrary to the HN zeitgeist, I have a lot of excitment for decentralization medium- to long term. But it seems almost everything that's happening in the DeFi space today is about as decentralized as a traditional client server app with mysql.

Because when you figure out Solana is a joke, you can take your millions off of their chain and onto Ethereum.

Re: OptiFi Program Incident Report

#127
post #47

Earlier quoted context omitted.

CitiBank can't get the money back they accidentally transferred to another company. https://www.bloomberg.com/news/articles/2022-08-15/citi-sues... You can say that's an edge case today but I and OP are saying, the future will look more like crypto looks today. Not a bright future.

> I and OP are saying, the future will look more like crypto looks today. Not a bright future. I don’t agree. I trust that loopholes like that will be slowly rectified with legislation if not present today. In fact, it’s likely that crypto will (problematically?) be heading the same way. There was a recent case of a crypto buff who found a bug in some project and made off with a few $Million and I think the courts sa…

> he could be arrested and expected to return it, just as if he made off with cash.

You have cash in your house and someone breaks in to steal everything. The insurance will _maybe_ cover your loss given that you secured it with basic security. _Maybe_ the police will investigate and arrest the burglar.

But even in this situation, you were better off putting your savings in any bank account where any fraudulent transaction can be reverted with a button.

Now, you have your crypto wallet. It gets emptied by some random bot. Well, you are as fucked than with your cash, except that nobody will cover your loss and nobody will investigate your case since the burglar is probably from another country.

Re: OptiFi Program Incident Report

#128
post #78

This is one of the biggest flaws in crypto. Small errors can erode hundreds of millions of value. That's when most crypto companies right now are very small. Can you imagine the chaos if crypto were to actually become big and dev count were to grow to 1k+ people spread across multiple offices? There's definite efficiency gains with crypto (a dex like Uniswap can do massive volume with very few developers for instance…

> This is one of the biggest flaws in crypto. Small errors can erode hundreds of millions of value. That's reality. Same thing would have happened if they had put all that cash on a boat, and accidentally sunk it.

Sure. But there is no reason to put all your cash on a boat, so nobody does it (or it's because the risks outweighs the benefits).

Re: OptiFi Program Incident Report

#129

Is there a good reason that the CLI is able to close a contract with money in it?

The money within the contract wasn't the problem, that was transferred out as part of closing the program.

However there were other assets on the chain that are locked using the program which are now inaccessible because its inoperable.

Consider it like an operation that closes and deletes your user-account but returns you an archive of your home directory when it's complete. However all files that weren't in your home directory that were encrypted with your local user key now can't be read.

It's likely infeasible to predicate program deletion on the program no longer being referenced in other programs/contracts.

Disclaimer: I'm not a Solana expert (or a crypto advocate for that matter)

Re: OptiFi Program Incident Report

#130
post #106
post #26

Earlier quoted context omitted.

You (and everyone really) should probably read some more comp.risks http://catless.ncl.ac.uk/Risks/ Certain fields have always had a high cost of programming error, including a cost in human life. It's just that cryptocurrency combines this with a first-to-market rush that's somehow still going on, encouraging a rush to error.

First to market is only part of the problem. Another self inflicted problem is that execution of those "smart" "contracts" cost tokens (so essentially money). This incentivizes developers to write the shortest possible code, without any "fluff" like tests or additional checks or more verbose style. And the immutability problem also increases severity of the problem - you either deploy immutable "contract" signifying…

Immutable code is a poor replacement for trust in a company. It shifts the trust from the company as it is now to the same company (and their capabilities) sometimes in the past. Preferably the company is operated completely anonymously.

It seems like the crypto community would do anything to avoid the legal/regulatory system and it's established processes of operation requirements, insurance and liabilities.

Doing that they regularly fail at performing the most basics of basic financial duties like not getting hacked and not throwing the keys to the kingdom.

I've yet to hear of a bank loosing funds and getting away with telling "tough luck" to their customers, but we've witnessed many crypto "banks" doing just that.

Post reply on HN