Live data from Hacker News

Bad code may be to blame for $500M of cryptocurrency losses in seven months

topbitcoin.lv

61–70 of 72 posts

Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months

#61
post #23

Consider this: Every single Bitcoin mined has either been lost/stolen, or will be lost/stolen, with probability approaching 1 over increasing timespans. I’d argue that since January 2009 about 50% of the ~17M coins minted to-date are lost. But the realization that this number will asymptotically approach 100% of all coins is a bit striking. The reasoning is simple - maintaining control of your coins is surprisingly d…

Backing your coins up is very easy, most wallets support BIP32/39/44. Just write the mnemonic down and put it under your mattress. Or a safe if you have one. But seriously, for most people under the mattress is equally safe. I don't understand why anyone would keep a non-trivial amount of coins in a wallet and not have a backup. That's irresponsible.

Isn't the problem keeping the coins in on online wallet or exchange? If you store your personal wallet offline how can you be hacked?

Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months

#62
post #42

Earlier quoted context omitted.

People losing their life savings because they kept it under their mattress is basically the reason that banks were invented. So I suppose this has all come full circle now.

Glacier Protocol offers a solution. https://glacierprotocol.org/releases/Glacier%20Protocol%20Do...

To call that a solution is generous.. it is unlikely the average person could follow the Glacier Protocol.

Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months

#63
post #59
post #49

Earlier quoted context omitted.

And that is exactly what you don't want in "money" in a functional economy. You don't want deflation. You want price stability. So the more it gets artificially valuable, the more useless it becomes for its intended purpose.

It is valuable as a store of value though. Either pure like gold, or tied to something more like assets. USD is a bit strange because it is both a store of value used by many countries as well as a currency. there is an implicit peg to oil though. So the the price of oil is something fairly important to the US.

The USD is a currency. Due to its stability, it is also used as a store of value by foreign countries.

Oil is pegged to the dollar. The price of oil is relevant because of its effects on prices, not the dollar.

Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months

#64
post #59

Earlier quoted context omitted.

It is valuable as a store of value though. Either pure like gold, or tied to something more like assets. USD is a bit strange because it is both a store of value used by many countries as well as a currency. there is an implicit peg to oil though. So the the price of oil is something fairly important to the US.

The USD is a currency. Due to its stability, it is also used as a store of value by foreign countries. Oil is pegged to the dollar. The price of oil is relevant because of its effects on prices, not the dollar.

> Oil is pegged to the dollar.

Oil producers may target a dollar price and trade in dollars, but oil is not pegged (that is: trading with a fixed exchange rate) to the dollar.

Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months

#65
post #26

Earlier quoted context omitted.

I've been using cryptocurrency for over five years and haven't lost as much as a satoshi. It's no more difficult than keeping other sensitive data secure.

So it's hard as hell?

It looks like you're being downvoted, but you're not wrong.

It's easy for most people to keep their personal data safe, because they're not targeted by attackers because there's little of value. It's hard for people whose sensitive data is valuable to keep it secure; if valuable white house secrets were stored with my strategies for protecting my personal sensitive data, they'd have been leaked ages ago.

Once your sensitive data is highly valuable, like if you store a decent amount of cryptocurrencies (or is an attractive female with private nude pictures[0] or have a big YouTube channel[1]), protecting sensitive data from the likely targeted attacks is hard.

[0]: https://en.wikipedia.org/wiki/ICloud_leaks_of_celebrity_phot... (I'm not sure if there was monetary value in those pictures, but they certainly had other forms of value.)

[1]: https://www.youtube.com/watch?v=LlcAHkjbARs (He talks a lot about unrelated (to this discussion) about his Amazon links; go to 3 minutes in for the discussion about being compromised.)

Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months

#66

Earlier quoted context omitted.

Fiat banks can recover money though - cash can be found and transactions unwound - and there are techniques to poison what is stolen without permanently decreasing the money supply. Freezing a wallet basically destroys the btc forever with no way to print more.

And the bitcoin software is written in stone, can never be changed.

Basically, yeah.

I mean, the wallet software is obviously open source, and you can change it however you want of course, but allowing for transactions to be undone would basically require rewriting the entire protocol and everything which interacts with the bitcoin network - and that's if it's even possible in the first place, without removing vital parts of bitcoin like the decentralization or being able to trust the entire network without trusting any one entity.

Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months

#67
post #51

Earlier quoted context omitted.

Supply is increasing though through mining. Stolen coins are still coins. And there's no way that lost coins are out pasing newly mined coins. True loss/data destruction/inaccessibility is fairly rare. Even in the Bitcoin community it's a huge misconception that Bitcoin is somehow inherently deflationary. The supply increases predictably through mining. It can be price deflationary when demand exceeds supply. But the…

Btc has a fixed supply that will be hit. About 17 of the 21 million have already been mined. That's a hard cap unless bitcoin radically changes. We will hit a time of zero miner reward, and even before that when the reward in miniscule in relation to float. We don't know the extent of lost coins. We can make an estimate based on inactive accounts. And stolen coins that have been blacklisted are essentially lost too.…

Just a small note: we won't ever hit a point where a miner will get zero money from mining a block, because people sending transactions pay a fee to the miner to have their transaction prioritied over people who pay a smaller fee, and the number of transactions per time unit is limited (and pretty small), and can't be easily changed radically (as in by orders of magnitude).

I think you're technically right, as the "miner reward" (as in the coins the miner cand give itself as a reward for finding a block) goes to 0, and you probably know that already, but I wanted to clarify for people who didn't yet know that.

Otherwise, I agree.

Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months

#68

Earlier quoted context omitted.

Backing your coins up is very easy, most wallets support BIP32/39/44. Just write the mnemonic down and put it under your mattress. Or a safe if you have one. But seriously, for most people under the mattress is equally safe. I don't understand why anyone would keep a non-trivial amount of coins in a wallet and not have a backup. That's irresponsible.

Isn't the problem keeping the coins in on online wallet or exchange? If you store your personal wallet offline how can you be hacked?

Lots of ways:

- Software you use for key generation uses a known random-seed.

- Compromised software that converts your seed into an address/priv key.

- Compromised transaction generation software.

- Offline wallet physically stolen

- Malware / firmware exploit on USB used to transfer transactions between online & offline computers

Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months

#69
post #43
post #23

Consider this: Every single Bitcoin mined has either been lost/stolen, or will be lost/stolen, with probability approaching 1 over increasing timespans. I’d argue that since January 2009 about 50% of the ~17M coins minted to-date are lost. But the realization that this number will asymptotically approach 100% of all coins is a bit striking. The reasoning is simple - maintaining control of your coins is surprisingly d…

It's not that hard. Do what you would do with a large amount of cash or gold coins: put it in a safe deposit box. Or a private vault, if you're ideologically opposed to banks. Unlike gold, you can also add redundancy and cryptographic protection, but even without that you can at least be as secure as you are with gold, which plenty of rich people store in vaults without issues.

People are idiots. It's almost impossible to destroy gold, quite easy with bitcoins.

Re: Bad code may be to blame for $500M of cryptocurrency losses in seven months

#70
post #54
post #23

Consider this: Every single Bitcoin mined has either been lost/stolen, or will be lost/stolen, with probability approaching 1 over increasing timespans. I’d argue that since January 2009 about 50% of the ~17M coins minted to-date are lost. But the realization that this number will asymptotically approach 100% of all coins is a bit striking. The reasoning is simple - maintaining control of your coins is surprisingly d…

Ever heard the rumor that nearly every $20 bill in circulation has detectible residual cocaine on it? In other worlds, the probability that a bill has been involved in a drug deal approaches 1 over increasing timespans. Interesting anecdote, but not really super informative.

Notes having cocaine on them doesn't show they've been involved in a drug deal. More likely someone rolled one up to snort the drug and then when it went through a sorting machine it got cocaine on to the machine and then many other notes.
Post reply on HN