153k Ether Stolen in Parity Multi-Sig Attack

Re:153k Ether Stolen in Parity Multi-Sig Attack by legolassexyman on Wednesday July 19, 2017 @07:22PM (#14808853)

As I said here last week "Also the lead developer is some kid who believes very much in moving fast and breaking things. This philosophy may work for a social network site but not for other people's money."

This philosophy permeates the community of Etherum development.

Bitcoin disabled most of the smart contracts op codes for a very good reason.

I wouldn't recommend putting anything of value into an Etherum smart contract and find a project with more responsible developers who take a more "wait and see" approach.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by Taek on Wednesday July 19, 2017 @08:06PM (#14809059)

People write this stuff off so fast. Here we have a parity developer, probably one of the most competent in the Ethereum ecosystem, and he screwed up to the tune of losing $30m of other people's money.

If HE can't get it right, what business do you have running around saying that anyone who can make a webpage can make a decentralized application?

We are playing with money. Dealing with attackers is not as simple as rebooting your server. Mistakes mean irreversible loss.

The devs in this industry are way over their heads and nobody is willing to admit it, because doing so destroys the entire core value prop of Ethereum, the poster child of the current bubble.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by dahdum on Wednesday July 19, 2017 @08:57PM (#14809294)

He may be brilliant, but he played fast and loose without real testing or concern, so I wouldn't call him the "most competent". For a wallet contract they knew would secure many millions of dollars, there should have been dozens of people auditing it before rolling out to users.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by ceejayoz on Wednesday July 19, 2017 @10:54PM (#14809742)

You're "no true Scotsman"ing so hard Mary, Queen of Scots doesn't even qualify.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by shrewduser on Wednesday July 19, 2017 @11:10PM (#14809800)

I wish I could see how the op is employing the no true Scotsman fallacy, but I can't.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by ceejayoz on Wednesday July 19, 2017 @11:17PM (#14809812)

https://twitter.com/SatoshiLite/status/887781929726038016

"If the creator of Solidity, Gavin Wood, cannot write a secure multisig wallet in Solidity, pretty much confirms Ethereum is hacker paradise."

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by dahdum on Wednesday July 19, 2017 @11:53PM (#14809914)

Charlie is trolling. The architect isn't going to be the best craftsman, that requires very different set of skills.

Parity devs may be academically brilliant, and they put out a fantastic client, but the wallet issue shows how lax their development lifecycle has been.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by heliumcraft on Thursday July 20, 2017 @07:02AM (#14811411)

Gavin Wood didn't not make the code change that caused this...

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by ericb on Thursday July 20, 2017 @07:18AM (#14811470)

I can't edit my post above to add this now, but looks like Charlie retracted this as Gavin was the original author, but not the one who made the mistake.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Wednesday July 19, 2017 @08:12PM (#14809088)

Dear god, I've been thinking crypto is a bubble since 2010. At some point, we have to admit this is not just a bubble. It's a new unproven evolving technology

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by Taek on Wednesday July 19, 2017 @09:38PM (#14809436)

Crypto has had at least 3 distinct bubbles. There's the current one, marked by Eth's absurd rise to $300. The previous one was when Bitcoin made an absurd rise to $1200 in 2014. There was a bubble before that where Bitcoin rose to $266 in 2011. And one before that I believe where Bitcoin rose to $32 in 2010.

Though crypto has risen past the high point of each of these bubbles, each price point can be definitively classified as a bubble in it's own time, and was followed by a crash that wiped out >70% of the market cap over the coming months/years.

Though it did recover, that doesn't mean it wasn't a bubble.

I believe cryptocurrency is going to be bigger than e-commerce is today. But it's not there yet, and it shouldn't be valued as though it has changed the world. It hasn't yet, and it's still a few years away at least from doing so.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Wednesday July 19, 2017 @11:07PM (#14809787)

It's only a bubble if you can identify it ahead of time. Stating that something became much more valuable over a short period of time doesn't mean you know how to identify bubbles. Bitcoin is 70-80 times more valuable now than when it was at 32, and had you bought it then you would be up a lot. So, to say crypto is in a bubble today is the same thing as to predict that in a few years it will be worth less than today. Do you know that definitively ? I don't

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Thursday July 20, 2017 @08:00AM (#14811675)

Downvoters, since you know how to indentify bubbles, I'm assuming you shorted ethereum on margin on GDAX when it hit 400 and made a ton? No? If not, why not, if you knew definitely it was a bubble ?

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by Taek on Thursday July 20, 2017 @11:21AM (#14813246)

Because it's very hard to figure out where the top of a bubble is, and if you short a bubble asset too long before the peak, you go broke, even if you are correct.

Don't short hopium.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Thursday July 20, 2017 @01:26PM (#14814526)

Well, now we are talking semantics. You don't get to claim you are correct if your forecast turns out to be wrong. So, if you identify a bubble, part of the requirement to say that you succeeded is that you can identify the top. Otherwise, your "knowledge" that it's a bubble is useless

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by MockObject on Thursday July 20, 2017 @03:27PM (#14815552)

I think people agree that a price rise was a bubble after it pops, and I don't believe that prediction is a necessary condition.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Friday July 21, 2017 @08:38AM (#14819897)

It is, otherwise how do you distinguish a bubble from a rise justified by fundamentals ?

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by JauntyHatAngle on Wednesday July 19, 2017 @08:20PM (#14809118)

I actually think eth has a lot of potential, but I don't think he's saying crypto is a bubble. He's probably talking about the ICO "bubble", which isn't a controversial thing to claim. Eth has already halved in value in the last month which is mostly put down to the crazy value being pumped into ICO's slowing down.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by vasilipupkin on Wednesday July 19, 2017 @08:41PM (#14809220)

I would argue ICO phenomenon is not a bubble Rather, some ICOs are scams But many are legitimate business ventures. Buying into an ICO is similar to buying deep out of the money options

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by mempko on Thursday July 20, 2017 @03:32AM (#14810645)

Someone's loss is anothers gain. That money didn't disappear, just got reallocated. And if spent ,will generate economic activity. It's certainly a hit in the trust of the core dev though.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by rootlocus on Thursday July 20, 2017 @06:06AM (#14811185)

This gets awfully close to the broken window fallacy https://en.wikipedia.org/wiki/Parable_of_the_broken_window

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by mempko on Friday July 21, 2017 @11:45PM (#14825288)

I agree, if they did not address the concerns it would become unworkable.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by gst on Thursday July 20, 2017 @03:29AM (#14810634)

> Bitcoin disabled most of the smart contracts op codes for a very good reason.

Bitcoin is also stuck in the past. Yes, Ethereum breaks things, but for me it's not about the money but about the technology stack. We're too early in the process to have the luxury of being able to stop innovating.

If I want to play with cool state-of-the-art technology I use Ethereum. For financial transactions I use my bank and/or Transferwise. Haven't quite yet figured out why I'd use Bitcoin for something.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by ghayes on Wednesday July 19, 2017 @08:04PM (#14809055)

Do you have examples of this, or just hearsay?

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by corndoge on Wednesday July 19, 2017 @08:14PM (#14809093)

the story you are commenting on is a good example

it should not be this easy to lose sixteen million dollars

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by Will_Do on Wednesday July 19, 2017 @08:43PM (#14809225)

Yes. If a similar scale thing were to happen in the U.S. banking system, 1% would be 160 billion dollars, not 16.

I'm amazed that otherwise intelligence people really believe this is a better system than fiat currencies + banks.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by xrd on Wednesday July 19, 2017 @11:06PM (#14809778)

Microtransactions.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by JohnJamesRambo on Wednesday July 19, 2017 @09:56PM (#14809508)

*intelligent

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by patejam on Wednesday July 19, 2017 @08:36PM (#14809198)

I feel like we shouldn't be expressed in dollars, but in percentage of total funds. In this case 16 million is about 1% of the total. This would be a $16 billion case if the US banking system was the target and used this technology.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by rubidium on Wednesday July 19, 2017 @08:58PM (#14809297)

That... doesn't make a difference in my mind. Losing 1% of people's money is _very_ unacceptable and worth being laughed at for.

Financial institutions are accurate to tiny tiny fractions of percentage points. Not "eh we got 99% of it right".

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by hinkley on Wednesday July 19, 2017 @09:27PM (#14809398)

Especially when the odds are that it will happen again soon.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by legolassexyman on Wednesday July 19, 2017 @08:16PM (#14809100)

You should ask yourself what the Bitcoin developers are doing while Ether takes their market share. The answer is the exact same thing, at https://elementsproject.org

Now why hasn't there been as much publicity about this? Is it because Vitalik Buterin is a wunderkind genius who simply beat them to market? Nope, the Bitcoiners are simply being more responsible and making sure they get the formula right before rushing to market.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by JohnJamesRambo on Wednesday July 19, 2017 @08:23PM (#14809129)

You sound very biased on this.

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by legolassexyman on Wednesday July 19, 2017 @08:32PM (#14809177)

I am very biased because I know the people at Blockstream have been thinking about this problem longer than the developers of Ethereum.

Please see this article to get an idea of the personalities involved:

http://www.newsbtc.com/2016/08/17/gregory-maxwell-vitalik-bu...

[ Parent | on HN ]

Re:153k Ether Stolen in Parity Multi-Sig Attack by coldtea on Wednesday July 19, 2017 @08:13PM (#14809089)

Beyond the one we're already discussing?

[ Parent | on HN ]