Live data from Hacker News

Critical Update on DAO Vulnerability

blog.ethereum.org

111–120 of 629 posts

Re: Critical Update on DAO Vulnerability

#111

It's almost as if a cryptocurrency system used by the grey market and black market sections of the internet contained actual blackhats. What a surprise. Much as I hate to link to reddit, for effective and biting criticism of cryptocurrencies: http://reddit.com/r/buttcoin

This might serve as a future warning to NOT write your own VM.

Sure, it's probably a contract issue, but we'd have some much better contract code if the VM didn't require you to code defensively all the time.

Re: Critical Update on DAO Vulnerability

#113
post #101

Earlier quoted context omitted.

Vitalik Buterin, the co-founder and Chief Scientist of Ethereum, just called for a DAO and ETH trading halt at all Ethereum exchanges: https://www.reddit.com/r/ethereum/comments/4oif2x/dao_attack...

Apparently all that talk of decentralisation goes out the window when you're losing money. Ha

Huh? What does halting trading has to do with compromising decentralization? You do know what "decentralization" mean right?

Re: Critical Update on DAO Vulnerability

#114
post #101

Earlier quoted context omitted.

Vitalik Buterin, the co-founder and Chief Scientist of Ethereum, just called for a DAO and ETH trading halt at all Ethereum exchanges: https://www.reddit.com/r/ethereum/comments/4oif2x/dao_attack...

Apparently all that talk of decentralisation goes out the window when you're losing money. Ha

Actually, I'd say the fact that he has to publicly ask for exchanges to stop the trades, and can't simply press a button or send out an order, shows the decentralization.

Decentralization doesn't prevent coordination.

Re: Critical Update on DAO Vulnerability

#115
Well, that was kind of inevitable. Building a financial system out of pure code with no humans in the loop and no legal structure is building a self-distributing bug bounty piñata. It's decentralised, so there's nobody who can throw a breaker and shout "stop!"; cryptocurrency transactions are irreversible, so thefts are permanent; and it's somewhat anonymous, so thefts are hard to trace.

It also demonstrates that being first-to-market trumps security. If the DAO had waited until a full formal verification system exists and had been applied, they wouldn't have been able to pick up the $160m of overenthusiastic money keen to rush headlong into the hands of hackers.

Re: Critical Update on DAO Vulnerability

#116

Earlier quoted context omitted.

Presumably the attacker will stop short of doing anything that would completely destroy the currency, since they now own a lot of it

Can't they just take control of TheDAO, and then steal all its Ether?

And drop its value to nothing, why do that?

Re: Critical Update on DAO Vulnerability

#120
This is massive. I observe with great interest how it will be handled - Ethereum is still young enough that doing a hard fork can be the sensible choice, and people can agree to do so (since such a large portion of ETH is now owned by baddies).

It has been said before, but there ain't no drama like Blockchain drama. No TV show, no book, nothing has me following it's story as Bitcoin and the other blockchains that come after it. Greatest drama of the millennia, so far.

Post reply on HN