Live data from Hacker News

The bug which lost more than $600M in various cryptocurrencies a few hours ago

twitter.com

121–126 of 126 posts

Re: The bug which lost more than $600M in various cryptocurrencies a few hours ago

#121
post #44

Earlier quoted context omitted.

Auditors have never fully prevented bugs in any other computing domain, i dont know why cryptocurrency would be any different.

Can't the same be said that auditors have never fully prevented fraud in the real-world?

Sure i guess, but im not sure i see what point you're trying to make. Nobody is claiming that auditors will prevent all financial fraud.

Re: The bug which lost more than $600M in various cryptocurrencies a few hours ago

#122
The "bug" is that some developers think of matching function signatures as some form of authN / authZ.

A few years back I wrote https://medium.com/coinmonks/lashing-out-at-a-spank-channel-... about a similar hack where a contract "trusted" a given (user input) contract based on nothing other than verifying a function signature. This latest hack was smarter but ultimately it still exploited a 4 bytes hash "security" feature...

Re: The bug which lost more than $600M in various cryptocurrencies a few hours ago

#123
post #91

Earlier quoted context omitted.

Irreversibility is one of its best features. Imagine a scenario in 50 years when 80% of token holders are dead... This could result in a non-trivial % of tokens being lost forever; this greatly reduces the remaining circulating supply of tokens and thus makes everyone else who still remembers their keys wealthier (less supply, same demand translates to higher price). On the other hand, stocks are more susceptible to…

That's just such a naive take with no connection to reality. Occasional deaths and inheritance by retail shareholders has zero impact on share prices.

Wait until the majority of boomers start retiring and/or dying, watch how that affects stock prices and/or the value of the USD relative to Bitcoin (if the Fed continues to prop up stocks artificially with more money printing), then we can talk.

Re: The bug which lost more than $600M in various cryptocurrencies a few hours ago

#124
post #82
post #23

There's a serious fundamental problem with DeFi that can't be solved with blockchains. Someone starts a blockchain company and hires a bunch of devs who make, idk, $40 to $100 per hour to build the thing. Maybe more, it doesn't really matter. Even just one dev or a few devs can make all the contracts needed for this. One day that dev notices a vulnerability in the smart contract he's writing! He has two choices: (a)…

> And law enforcement is a thing! More than that, there's a minority perspective in DeFi that the code is the law. If the code allows it (e.g., withdrawals under an unintended circumstance), it's therefore legal. If it were illegal, the code wouldn't allow it.

I think this could make sense if it is applied in a small community of tinkerers that understand and accept the risks (cf. accredited investor), or I suppose a community of dissidents that trust the police even less than they trust the code, but for wider society it would not be appropriate.

Re: The bug which lost more than $600M in various cryptocurrencies a few hours ago

#125
post #101

Earlier quoted context omitted.

> Sometimes mistakes happen(a faulty system, a design bug or straight out human error and people who are trying to take advantage of those), most of the time these are correctable. These errors are correctable if the counter-parties trust each other, or at least have a relationship that they don't want to undermine by being petty. Immutable blockchain systems are valuable in part because they allow entities to transa…

How do they transact if they don't trust each other? You have the guarantee that the money your received is not going back but what kind of guarantee does the receiver of product/service has? Yes - so far, it worked well for extortion with ransomware but is that something that we want to have? Can you think of a legit business case where the merchant providing the promised service is guaranteed and all you need is a…

[deleted]
Post reply on HN