Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

White hat hacker awarded $2M for fixing ETH-creation bug

cryptoadventure.com

Post reply on HN
Print view View original

271–280 of 354 posts

Re: White hat hacker awarded $2M for fixing ETH-creation bug

#271

Post by aspenmayer »

colesantiago wrote: post #186
tenuousemphasis wrote: post #114

Earlier quoted context omitted.

Bitcoin has a system built on top of it called Lightning, which allows for millions of cheap transactions per second inside of payment channels. Only the opening and closing of channels requires a transaction on the blockchain.

Lightning isn't really using Bitcoin is it? The strike app (which uses Lightning) is not available worldwide which really doesn't give the image that Bitcoin lightning is decentralised at all.

Anyone can run their own Bitcoin and/or Lightning node. Both Bitcoin and Lightning Network are totally decentralized.

Re: White hat hacker awarded $2M for fixing ETH-creation bug

#272

Post by baby »

saurik wrote: post #3

Prior discussion of this incident (and the $2M bounty) here on Hacker News: https://news.ycombinator.com/item?id=30289240 My (I'm the hacker) article / post-mortem this blog post is referring to: https://www.saurik.com/optimism.html At the time of this last getting traction a few days ago, some people were sad that the title of my article and the discussion that resulted focused more on the bug instead of the bounty…

That’s what I thought too, but it looks like someone got a bit more than you a few weeks before: https://medium.com/immunefi/polygon-lack-of-balance-check-bu...

(Dec 28 2021)

> Polygon is paying out a bounty of $2.2m in stablecoins to Leon Spacewalker and 500,000 MATIC to Whitehat2, which according to current market value is worth $1,262,711. The $2.2m exceeds the maximum value of Polygon’s critical bounty in recognition of the severity of the vulnerability.

More info about the bug: https://medium.com/immunefi/polygon-lack-of-balance-check-bu...

Interestingly, this reminds me of a report I wrote a long time ago about the dangers of ecrecover (as it can give ambiguous results)

Re: White hat hacker awarded $2M for fixing ETH-creation bug

#273

Post by ge96 »

heliodor wrote: post #54
saurik wrote: post #42

Earlier quoted context omitted.

I do not expect to make any major expensive lifestyle changes as a result of having more money (and to the extent to which I have already been being paid better recently due to working on Orchid, I have only barely done so and usually only quite temporarily), which I realize disappoints some people who had wanted me to post a concrete picture of something expensive I purchase to help motivate others to reach for bug…

Please read this thread to see the pitfalls that might potentially lie ahead: https://www.reddit.com/r/AskReddit/comments/24vo34/comment/c... It's about winning the lottery but still applicable to some extent, and shows how people's lives go horribly wrong.

wth you can get sued for making someone else look bad by being better? ha

Re: White hat hacker awarded $2M for fixing ETH-creation bug

#274

Post by jack_pp »

saurik wrote: post #42
sillysaurusx wrote: post #31

Earlier quoted context omitted.

So how many lambos are you buying? More seriously, will you keep it in the bank and extract $100k a year the rest of your life? What are you going to do?

I do not expect to make any major expensive lifestyle changes as a result of having more money (and to the extent to which I have already been being paid better recently due to working on Orchid, I have only barely done so and usually only quite temporarily), which I realize disappoints some people who had wanted me to post a concrete picture of something expensive I purchase to help motivate others to reach for bug…

You can buy a very nice car that might even appreciate in value so you get to have your cake and eat it too, I recommend you do research on this.

Re: White hat hacker awarded $2M for fixing ETH-creation bug

#276

Post by saurik »

baby wrote: post #272
saurik wrote: post #3

Prior discussion of this incident (and the $2M bounty) here on Hacker News: https://news.ycombinator.com/item?id=30289240 My (I'm the hacker) article / post-mortem this blog post is referring to: https://www.saurik.com/optimism.html At the time of this last getting traction a few days ago, some people were sad that the title of my article and the discussion that resulted focused more on the bug instead of the bounty…

That’s what I thought too, but it looks like someone got a bit more than you a few weeks before: https://medium.com/immunefi/polygon-lack-of-balance-check-bu... (Dec 28 2021) > Polygon is paying out a bounty of $2.2m in stablecoins to Leon Spacewalker and 500,000 MATIC to Whitehat2, which according to current market value is worth $1,262,711. The $2.2m exceeds the maximum value of Polygon’s critical bounty in recogni…

Ooof... so close!!

Re: White hat hacker awarded $2M for fixing ETH-creation bug

#277

Post by daqhris »

saurik wrote: post #3

Prior discussion of this incident (and the $2M bounty) here on Hacker News: https://news.ycombinator.com/item?id=30289240 My (I'm the hacker) article / post-mortem this blog post is referring to: https://www.saurik.com/optimism.html At the time of this last getting traction a few days ago, some people were sad that the title of my article and the discussion that resulted focused more on the bug instead of the bounty…

Dude that is karma points accumulated throughout your life. Proud that you won! I may have used and enjoyed for FREE some of your software while jailbreaking or bricking mobile devices in my university dorm room (Beijing, 2014). Stay blessed!

Re: White hat hacker awarded $2M for fixing ETH-creation bug

#278

Post by wesapien »

heliodor wrote: post #54
saurik wrote: post #42

Earlier quoted context omitted.

I do not expect to make any major expensive lifestyle changes as a result of having more money (and to the extent to which I have already been being paid better recently due to working on Orchid, I have only barely done so and usually only quite temporarily), which I realize disappoints some people who had wanted me to post a concrete picture of something expensive I purchase to help motivate others to reach for bug…

Please read this thread to see the pitfalls that might potentially lie ahead: https://www.reddit.com/r/AskReddit/comments/24vo34/comment/c... It's about winning the lottery but still applicable to some extent, and shows how people's lives go horribly wrong.

One relies on solving a problem and providing a service. The other one relies on having the ability to go to a convenience store and fork over the cost of a lottery ticket. Not even in the same reality.

Re: White hat hacker awarded $2M for fixing ETH-creation bug

#279

Post by sizzle »

kingcharles wrote: post #112
heliodor wrote: post #54

Earlier quoted context omitted.

Please read this thread to see the pitfalls that might potentially lie ahead: https://www.reddit.com/r/AskReddit/comments/24vo34/comment/c... It's about winning the lottery but still applicable to some extent, and shows how people's lives go horribly wrong.

Wow, that's depressing. I was in jail with a guy who was a total mess. Nice, but seemed pretty mentally-disabled. One day a new guy came on the block. "Wow, what is George doing in here?" "You know him?" "Yeah, I know him. He is one of the greatest musicians I ever met. He can play any instrument like a savant. I knew him a few years ago, just after he inherited $4m when his father passed. He ended up getting in drug…

I bet if he was allowed to pick up an instrument and play it would be therapeutic for him. Sad story, hope he bounces back.

Re: White hat hacker awarded $2M for fixing ETH-creation bug

#280

Post by SparkyMcUnicorn »

colesantiago wrote: post #110
whitepaint wrote: post #95

Earlier quoted context omitted.

Tell me you don't know what DeFi is without telling me you don't know what DeFi is.

What is the process of getting your money back from a hacked DeFi project? Why do I have to pay more fees to swap tokens on decentralised exchanges making them unusable, and how exactly is DeFi decentralised?

ETH is not the only chain out there. Transaction fees on Polygon and Harmony average between $0.001 - $0.02, and have all the things you'd expect from DeFi like Uniswap, Curve, and Aave.

The decentralized part of DeFi is the smart contracts. If you can interact with the contracts without any centralized help, then how exactly is it centralized in your opinion?

Post reply on HN