News for hackers. Stuff that matters.
Re:153k Ether Stolen in Parity Multi-Sig Attack by federicobond on Thursday July 20, 2017 @10:49AM (#14812943)
Things are not always simpler at a lower level of abstraction.
Re:153k Ether Stolen in Parity Multi-Sig Attack by mbrock on Thursday July 20, 2017 @01:39PM (#14814651)
It depends what simplicity you mean. The Solidity compiler is very far from simple, so if you consider that part of the complexity incurred by using Solidity, then a reasonably small bytecode program might be much easier to audit. Consider that a typical smart contract is as simple as "if four out of these six addresses make the same proposal then execute it." You can basically write these things in hexadecimal without too much trouble.
Re:153k Ether Stolen in Parity Multi-Sig Attack by federicobond on Saturday July 22, 2017 @01:39AM (#14825592)
Yes, that's definitely a good idea. I will go back to my magnetized needle now, I have some bit flipping to do in order to finish my task for Monday.
Re:153k Ether Stolen in Parity Multi-Sig Attack by federicobond on Saturday July 22, 2017 @01:46AM (#14825617)
Speaking seriously, there is an assembly for Ethereum called LLL. I would love to see code that performs exactly that example you mention and is easier to audit than the equivalent Solidity version.