News for hackers. Stuff that matters.
Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by Yizahi on Thursday December 02, 2021 @07:30AM (#29415278)
Just remember - code is law. No takesies-backsies :)
Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by splendidHaiku on Thursday December 02, 2021 @08:04AM (#29415588)
The person who lost the 50 million probably insured his money with something like https://nexusmutual.io/. If you invest a large sum, you should always insure it against hacks.
Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by hbbio on Thursday December 02, 2021 @09:00AM (#29416163)
Being decentralized does not prevent them from making the job of an insurer.

Nexus Mutual just told on Twitter that since it is not a smart contract attack, they're not going to pay.

Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by koolba on Thursday December 02, 2021 @09:23AM (#29416442)
The only thing riskier than smart contracts would be smart contract insurance products atop smart contracts. I'm sure they only allow for vetted contracts, but the incident discussed in this article was not a contract hack, it was a website hack to change the approve addresses. If that type of thing is going to be covered then it's well beyond smart contract due diligence. That would require evaluating end-to-end op sec practices on an ongoing basis.
Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by NationalPark on Thursday December 02, 2021 @09:55AM (#29416878)
https://twitter.com/nexusmutual/status/1466395880806928387?s...

Looks like they’re refusing to cover it because it was a supply chain attack.

Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by cblconfederate on Thursday December 02, 2021 @08:28AM (#29415815)
I always found that phrase misleading. Code is automation, law is for the stupid things people do.
Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by k__ on Thursday December 02, 2021 @07:37AM (#29415342)
If they didn't use a centralized service like Cloudflare, this might not even have happened, lol.
Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by root_axis on Thursday December 02, 2021 @08:00AM (#29415555)
Perhaps, but we know this kind of thing happens all the time even without something like Cloudflare in the mix
Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by cle on Thursday December 02, 2021 @08:26AM (#29415803)
There are definitely takesies-backsies if a majority of validators agree on it.
Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by danielvf on Thursday December 02, 2021 @08:34AM (#29415878)
While technically correct, amounts that have been stolen since the DAO hack have been 10x larger and no hard forks have occurred. I think the community consensus on this has evolved.
Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by throwaway248329 on Thursday December 02, 2021 @10:25AM (#29417241)
*if Vitalik agrees on it
Re:DeFi protocol BadgerDAO exploited for $120M in front-end ... by suikadayo on Friday December 03, 2021 @10:12AM (#29430895)
Well, no, because the community voted on it, and people decided to run nodes that accept that.