News for hackers. Stuff that matters.

A comment on Zcoin implementation bug enabled attacker to create over 500K Zcoins. Parent comment

Re:Zcoin implementation bug enabled attacker to create over ... by petters on Tuesday March 07, 2017 @03:23AM (#13809028)
As far as I can tell, this bug has nothing to do with memory-safety. And I don't think C++ is to blame here.

It's just a lot of untested code. Surely even Ocaml and Haskell need tests.

[ Parent | on HN ]
Re:Zcoin implementation bug enabled attacker to create over ... by yjgyhj on Tuesday March 07, 2017 @06:12AM (#13809571)
Yes, this bug is not about memory safety - but having the state-writing operator so easy at hand was probably what lead to the mistake in the first place. In my GP comment I went on to rant about other classes of bugs which are obsolete since the 1970s, but still happen.
[ Parent | on HN ]
Re:Zcoin implementation bug enabled attacker to create over ... by willtim on Tuesday March 07, 2017 @08:30AM (#13810106)
No C++ is to blame. This type of error could never happen in OCaml and Haskell.
[ Parent | on HN ]