Re:153k Ether Stolen in Parity Multi-Sig Attack
by sidthekid on Wednesday July 19, 2017 @05:20PM
(#14808060)
Seems like something a code review would have caught. Then again, code reviews and other slow processes are probably not the par for startups.
[ Parent
| on HN ]
Re:153k Ether Stolen in Parity Multi-Sig Attack
by DennisP on Wednesday July 19, 2017 @05:45PM
(#14808266)
About half my day job is auditing Solidity code for startups. And yes this should have been caught.
Re:153k Ether Stolen in Parity Multi-Sig Attack
by zdkl on Wednesday July 19, 2017 @06:25PM
(#14808548)
Auditing Solidity? Sounds sexy and infernal at the same time. Congratudolences I guess?
Re:153k Ether Stolen in Parity Multi-Sig Attack
by glitch003 on Wednesday July 19, 2017 @11:20PM
(#14809822)
Can you share where you work? I'm looking for someone to audit some Solidity code.
Re:153k Ether Stolen in Parity Multi-Sig Attack
by pas on Wednesday July 19, 2017 @05:25PM
(#14808100)
Or just dumb fuzzing. Or a testnet. Or whatever the fancy word for static verification is nowadays.
Re:153k Ether Stolen in Parity Multi-Sig Attack
by tehlike on Wednesday July 19, 2017 @06:51PM
(#14808702)
code reviews are prone to human errors, even if you have the best engineers.
Re:153k Ether Stolen in Parity Multi-Sig Attack
by mechnesium on Wednesday July 19, 2017 @06:33PM
(#14808594)
Precisely. Code reviews and software quality assurance aren't just corporate redtape, they can save your rear.
Re:153k Ether Stolen in Parity Multi-Sig Attack
by Cthulhu_ on Wednesday July 19, 2017 @06:56PM
(#14808724)
Especially for this; it should be enterprise, bank-tier code, covered by as much red tape as possible.
The problem with cryptocurrency is that they try to be better than the system, but have to relearn all the lessons the hard way. It probably won't take too long before all of it becomes exactly like what banks are now - heavily regulated, etc.