Re:SQL on Ethereum Blockchain with Presto
by DennisP on Wednesday July 26, 2017 @11:14AM
(#14856865)
Luckily, while it's easy to introduce reentrant errors, it's also easy to avoid them: just make sure that an ETH transfer or another call to an unknown contract is always the last thing you do in a transaction.
It's sometimes easy to miss, but the ecosystem is also a lot better at insisting on public security audits.
What I would instead wager is that it's too easy to introduce reentrant errors in Solidity.
I've noticed since the DAO exploit, the ecosystem has been better about this though. For example, Solidity's docs has a section of reentrancy, and even the in-browser editor can warn you about reentrancy in some cases. Seems to be improving, though unfortunately after big expense.