News for hackers. Stuff that matters.

A comment on SafeDollar ‘stablecoin’ drops to $0 following DeFi exploit on Polygon. Parent comment

Re:SafeDollar ‘stablecoin’ drops to $0 following DeFi exploi... by uncomputation on Monday June 28, 2021 @03:20PM (#27666489)
Considering there are still new bugs found in chip designs, operating systems, and compilers that have been around 4 times as long as any cryptocurrency I have literally no idea why you would feel safe in “smart contracts.” At least if my bank account is hacked, I have a solid legal standing for compensation and I have good reason to believe centralized financial institutions will keep extensive documentation and logs. With decentralized finance, all I have is some Medium dot com post on the “Forward Plan” and an ominous message that “SAFEDOLLAR IS UNDER ATTACK.”
[ Parent | on HN ]
Re:SafeDollar ‘stablecoin’ drops to $0 following DeFi exploi... by rawtxapp on Monday June 28, 2021 @03:23PM (#27666536)
The bugs found in smart contracts equal large sums of money right away unlike 0-days in OSes or other systems where the link is much more indirect. For example, if you find a 0-day on Windows, sure you might sell it for 7-8 figures on the black market, if you found a bug on maker (or any of the big contracts), you could walk away with billions of dollars in a practically untraceable way.
[ Parent | on HN ]
Re:SafeDollar ‘stablecoin’ drops to $0 following DeFi exploi... by doesnotexist on Monday June 28, 2021 @03:27PM (#27666613)
https://en.wikipedia.org/wiki/Market_for_zero-day_exploits#M... The wikipedia entry on this is a bit misleading or misinformed. As there are multiple above ground buyers for 0-days that have no interest in making it difficult for people to sell to them.
[ Parent | on HN ]
Re:SafeDollar ‘stablecoin’ drops to $0 following DeFi exploi... by reidjs on Monday June 28, 2021 @07:14PM (#27669558)
There's still a middle-man to deal with in that process. In this case, you extract a decent amount of 'money' directly.

Would you rather win $100 and have to make a phone call to claim it, or find a $100 bill on the street?

[ Parent | on HN ]
Re:SafeDollar ‘stablecoin’ drops to $0 following DeFi exploi... by hanniabu on Monday June 28, 2021 @07:44PM (#27669797)
> Considering there are still new bugs found in chip designs, operating systems, and compilers that have been around 4 times as long

Not quite the same. Those codebases are much larger, often include legacy spaghetti code, or are closed source. This makes it more difficult to find exploits, not to mention there's not as clear of path of financial incentive.

[ Parent | on HN ]
Re:SafeDollar ‘stablecoin’ drops to $0 following DeFi exploi... by norswap on Thursday July 01, 2021 @08:29AM (#27698443)
As someone that has experience in compilers and smart contracts, I can tell you they are an order of magnitude or more apart in terms of difficulty. Most smart contracts are not that complicated.
[ Parent | on HN ]