News for hackers. Stuff that matters.
Re:Did I just lose half a million dollars? by noduerme on Sunday January 30, 2022 @04:16AM (#30135263)
Wait. I'm not letting anyone off the hook for not knowing the above if they put $5 into something, let alone $500k. But even as a coder and someone who was deeply involved in crypto at one point (2011) I find it hard to make heads or tails of wtf this means. All I hear are a lot of acronyms and bizarre edge cases upon edge cases. It sounds like those arguments you'd hear between kids in junior high over magic cards or pogs or something. If this is the level of magical knowledge required to deal with these tokens, it sure seems like a sucker's market.
Re:Did I just lose half a million dollars? by sanderjd on Sunday January 30, 2022 @08:46AM (#30137133)
I think this is a symptom of the general problem of calling everything "cryptocurrency", which anchors people on the mental model of Bitcoin. You were involved in "cryptocurrency" 2011 when everything was Bitcoin or essentially just a fork of Bitcoin and all of the stuff in the comment you replied to was a few years away from existing.

I think it would be like writing "applications" in the early 90s in Visual Basic and then reading something about web applications and saying "I was involved in applications and none of this makes sense to me". That's because it's a different domain, with some similarities but many differences.

Edit: Changed "crypto" to "cryptocurrency" to differentiate from a different general problem with how the shorthand already had a different meaning.

Re:Did I just lose half a million dollars? by throw0101a on Sunday January 30, 2022 @09:01AM (#30137250)
> I think this is a symptom of the general problem of calling everything "crypto", which anchors people on the mental model of Bitcoin.

Or those of us who immediately think of AES, RSA, and Diffie–Hellman.

Anyone around tech in the 1990s may also remember:

* https://en.wikipedia.org/wiki/Crypto_Wars

Re:Did I just lose half a million dollars? by sanderjd on Sunday January 30, 2022 @09:31AM (#30137494)
Right you are. I just edited to differentiate from this other general problem with the nomenclature in the space.

I actually think this one leads to less confusion though, because the people who are familiar with "crypto" vis cryptography universally have enough expertise to differentiate it from "crypto" vis cryptocurrency. Whereas I would estimate that at least 99% of people who have heard of both Bitcoin and Ethereum have no idea that there are important differences in their capabilities and technology.

All the smart but non-technical people I know or read commentary from talk about cryptocurrency as a single thing, where that thing is just different flavors of Bitcoin.

Re:Did I just lose half a million dollars? by dTal on Sunday January 30, 2022 @09:40AM (#30137549)
The next time I get cornered by a coinhead - a worryingly common occurrence in real life lately - I'm going to say "Oh, I love crypto! My bank uses it so I can access my account from anywhere. It's great!"
Re:Did I just lose half a million dollars? by sanderjd on Sunday January 30, 2022 @09:47AM (#30137619)
hahaha yeah you can claim a different definition of "crypto" depending on whether you're talking to an anarchist or an institutionalist.
Re:Did I just lose half a million dollars? by tata71 on Sunday January 30, 2022 @08:47PM (#30143504)
Many of the same teams in this round.
Re:Did I just lose half a million dollars? by johnchristopher on Sunday January 30, 2022 @10:59AM (#30138260)
It goes to show that cryptomoney has not yet a settled common set of words to describe what's happening, unlike applications which have "gui, compilers, loop, trees, objects, etc.".

It's still to much specialized to follow what's going on from a higher viewpoint.

Re:Did I just lose half a million dollars? by FDSGSG on Sunday January 30, 2022 @11:37AM (#30138591)
I don't think so. The terminology is quite standardised, but just like "gui, compilers, loop, trees, objects, etc." you're not going to know them unless you're familiar with the subject.
Re:Did I just lose half a million dollars? by dpark on Sunday January 30, 2022 @12:38PM (#30139174)
Is it really? From what I can tell these are all Etherium-specific terms. This is not standardized. It might be consistent but that’s not at all the same as actually being standardized.

This seems like saying that Chef terminology is standard. It might be internally consistent with its talk of recipes and ingredients and whatnot for imaging machines. But this terminology is not standard because it’s meaningless to someone who had experience with a different imaging platform.

Re:Did I just lose half a million dollars? by sanderjd on Sunday January 30, 2022 @12:51PM (#30139316)
I think it's a mix. Some of it is Ethereum specific and some is pretty standard across all blockchains that support smart contracts.
Re:Did I just lose half a million dollars? by kylebenzle on Sunday January 30, 2022 @02:46PM (#30140408)
Yes, it really is pretty standard and straight forward. The ONLY problem is that its popularity has skyrocketed so there are A LOT of people talking about it who have no technical understanding. Parent comment above is a perfect example, complaining because in 10 years the tech has evolved.
Re:Did I just lose half a million dollars? by sanderjd on Sunday January 30, 2022 @12:14PM (#30138925)
I think you're both right to a degree. I agree the jargon is pretty well defined at this point, but it certainly is not as widely understood as the earlier computing and internet jargon. I think the mainstream is in the phase of basically having no idea whatsoever. I am sympathetic to them. I think they feel chuffed with themselves for finally figuring out what Bitcoin is, and now we're telling them they're still over half a decade behind the curve?!
Re:Did I just lose half a million dollars? by afidrya on Sunday January 30, 2022 @04:28AM (#30135337)
In simple words, he should have called a smart contract's function which would withdraw his tokens and send real ETH to his address. Instead, he sent tokens to smart contract's address and they will stay there forever, not associated with any account. This complexity should be abstracted away by wallet's UI. Users don't have to call APIs directly. Also, this whole situation could be prevented by trying to send a smaller amount first.
Re:Did I just lose half a million dollars? by noduerme on Sunday January 30, 2022 @04:36AM (#30135379)
I've written middleware APIs for accepting currency in carts and casinos that interfaced with / polled bitcoind and other daemons. Why on earth would this person be calling APIs directly, and why would the daemon not just reject the transaction if it's an unexpected kind of token? Or if he added funds to the contract why not be able to remove them to the same address? I never dealt with smart contracts but even allowing this to happen without an error seems like a crazy, terrible design.
Re:Did I just lose half a million dollars? by jazzyjackson on Sunday January 30, 2022 @05:35AM (#30135665)
from the reddit comments, similar question, apparently every instruction adds gas fees to running the contract, so if you're going to use the contract a lot, you leave out any kind of validation.

>> Wow why didn't the contract creators think this through and block requests to the contract

> Because adding that check would increase the cost of every user transaction. All AMM swaps would be done with WETH so it’s the right call to not have it in there

Re:Did I just lose half a million dollars? by dTal on Sunday January 30, 2022 @06:20AM (#30135992)
There are, of course, other industries with financial incentives against safety features. We usually regulate them.

We can point and laugh at this one person, but according to the reddit thread they're the 265th person to make this mistake, and more than half of the money in the inaccessible account is not theirs.

Re:Did I just lose half a million dollars? by GaylordTuring on Sunday January 30, 2022 @11:28AM (#30138518)
And that's just for this particular token. You can go to just about any token contract and see how numerous people have sent their tokens to the contract address itself.
Re:Did I just lose half a million dollars? by noduerme on Monday January 31, 2022 @01:41AM (#30145246)
I hadn't even thought about this. With BTC early on, the only party to really benefit from lost coins would be "Satoshi", but his coins weren't worth anything until the currency took off anyway, so it was more important and long-term profitable to build a system that didn't lead to user anger than one that would lose coins to deflate what was already a deflationary currency. It really does show how slimy the whole cryptocurrency world has become.
Re:Did I just lose half a million dollars? by XorNot on Sunday January 30, 2022 @05:54AM (#30135777)
I really can't think of an expression other then "lol" to sum up my response here for just how incredibly stupid this is, as a "platform of the future".

A design which actively discourages robust programming and error handling in financial software. Wow.

Re:Did I just lose half a million dollars? by ljm on Sunday January 30, 2022 @08:55AM (#30137208)
It's like a libertarian utopia. Literally everything is an individual responsibility with no wider recourse.

Want validation? Other people don't want to pay for stuff they're not validating... so it's on you to be careful.

Accidentally fuck up? Not our problem, that's on you for not calling the right API.

Want your money back? We're not paying money to cover for other people's mistakes. You're on your own bud.

Re:Did I just lose half a million dollars? by BuyMyBitcoins on Sunday January 30, 2022 @09:50AM (#30137648)
You forgot to add “If you don’t like it, you’re free to create your own blockchain”.
Re:Did I just lose half a million dollars? by skinnymuch on Sunday January 30, 2022 @11:49AM (#30138687)
What about the Eth DAO forks? How was that individual responsibility?
Re:Did I just lose half a million dollars? by optimalsolver on Sunday January 30, 2022 @05:33PM (#30141920)
All smart contracts are immutable, but some are more mutable than others.
Re:Did I just lose half a million dollars? by ericmay on Sunday January 30, 2022 @09:16AM (#30137368)
Ok… but then if you’re going to throw out these cases you should also address how markets can fix these issues, such as great customer service: “when I fucked up they helped me out, they’ll get more of my business”, or maybe insurance, or just better products that don’t have these issues.

Idk why people conflate libertarianism with this hyper-individualist stuff. It really isn’t the case.

Re:Did I just lose half a million dollars? by ljm on Sunday January 30, 2022 @09:26AM (#30137451)
Do ethereum and smart contracts currently have excellent customer service, such that the guy in TFA can get his 500k back?
Re:Did I just lose half a million dollars? by spookthesunset on Sunday January 30, 2022 @03:25PM (#30140759)
Why should this person get anything back? Code is law. And if code is law all bugs are also law.

The half million was a fair and just transfer. Whoever is the recipient is fully deserving both morally and ethically of their new-found wealth.

If I was on the receiving end of this transaction, I’d thank the sender for the money and move on with my life. Of course I’d never be in the position to receive the funds because I’m not stupid enough to play this game—odds are very good I would be the one who sent half a million dollars by mistake!

I mean, I think I’m joking but not really. If you want to practice “code is law” and really mean it, this is the kinds of stuff that will happen.

Re:Did I just lose half a million dollars? by optimalsolver on Sunday January 30, 2022 @05:34PM (#30141933)
Code wasn't law when Ethereum foundation insiders stood to lose a fortune in the DAO hack.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @11:13AM (#30138402)
The one who has the private keys to that account could give them the ETH back, yeah. But if no one has the private keys, they can not get it back, that would defeat the entire point of cryptocurrencies in the first place.
Re:Did I just lose half a million dollars? by tetsujinnn on Sunday January 30, 2022 @01:36PM (#30139761)
There are two types of accounts in Ethereum, externally owned accounts (EOA) and contracts. EOA are controlled by private keys where contracts are not. Since the user sent ETH to a contract, he cannot get his ETH back if the contract does not have a method to transfer ETH back. Whereas if he sent ETH to an EOA then the user of that account can send him back ETH.
Re:Did I just lose half a million dollars? by beefield on Sunday January 30, 2022 @11:32AM (#30138541)
But of course they can - if they are the right persons, that is. (See DAO hack. Of course, that did defeat the whole purpose of smart contracts but nobody was willing to notice.)
Re:Did I just lose half a million dollars? by Sebb767 on Sunday January 30, 2022 @01:15PM (#30139552)
> See DAO hack. Of course, that did defeat the whole purpose of smart contracts but nobody was willing to notice

Of course a lot of people noticed. The problem is that cryptocurrencies are currently primarily functioning as investment object rather than an actual secure financial ledger, which is why the interest of investors will trump purity.

Re:Did I just lose half a million dollars? by jlokier on Sunday January 30, 2022 @09:48AM (#30137629)
Low-cost insurance is an interesting idea that might actually work to smooth over some of the hard edges of "code is law".

It ought to be possible to craft an insurance policy that would pay out the $500k (or equivalent WETH/ETH) in cases like the one in this article, where the transparency of the ledger clearly shows that the tokens are unrecoverable.

As insurance companies are notorious for declining to pay out, the clear evidence trail would be helpful to allow the insuree to take the claim to a regular court for a human decision on its validity.

Re:Did I just lose half a million dollars? by jethro_tell on Sunday January 30, 2022 @11:46AM (#30138653)
Lol, so like the FDIC but you have to sue to get your money.
Re:Did I just lose half a million dollars? by jlokier on Monday January 31, 2022 @12:26AM (#30144850)
Not really. Having the option of a lawsuit is just a backup; the possibility is what makes sure the insurer chooses to pay without one.

An insurer that knows when it doesn't have a case and will be forced to pay (plus costs) when there's clear evidence of coverage and loss will almost always pay without a fight.

However if there are high-value decisions which are not so clear cut, then having the option to go to court or some other mediation system to settle is quite useful. One of the critisms of "code is law" is the lack of mechanism for nuanced, human intervention when something unexpected happens due to a bug, design flaw or unexpected consequence that turns out to be unreasonable.

Re:Did I just lose half a million dollars? by mlac on Sunday January 30, 2022 @11:24AM (#30138487)
Code can screw up at scale. And at this point if you’re capable enough to understand the edge cases and offer insurance against them, the insurance went really cover that much.
Re:Did I just lose half a million dollars? by dmitriid on Sunday January 30, 2022 @10:24AM (#30137926)
> but then if you’re going to throw out these cases you should also address how markets can fix these issues, such as great customer service

Ahahahahahha. Ahahahahahahahahahha. Ahahahahahhahahahahahahahah.

--- several minutes of laughter later ---

Markets don't care and they will not fix these issues, because suckers losing money is a much better market proposition than losing money on customer support.

Fo go ahead and learn some history, will you? Almost every single regulation we have in place is precisely because markets never ever fix things.

Re:Did I just lose half a million dollars? by tirpen on Sunday January 30, 2022 @12:40PM (#30139212)
And yet, disputing charges via your bank and issuing chargebacks via VISA/Mastercard are things that definitely exist and work perfectly fine. And as long as there is no equivalent function in crypto, it won't be suitable as a currency for general use.

And no amount of mocking faux laughter will change that.

Re:Did I just lose half a million dollars? by EVa5I7bHFq9mnYK on Sunday January 30, 2022 @08:16PM (#30143278)
Crypto works like cash. If you lose cash, there is no one to dispute charges and issue chargeback.

BTW I never had success trying to chargeback VISA for services that were not delivered. Scammers do it without problem though.

Re:Did I just lose half a million dollars? by tirpen on Monday January 31, 2022 @04:00AM (#30145989)
Cash transactions are done locally when you can typically inspect the object of the transaction before paying. That's why there is not the same need for these kinds of protection.

Crypto combines the worst properties of cash and wire payment into a package that has no customer protection and is almost tailor made for scammers.

Re:Did I just lose half a million dollars? by EVa5I7bHFq9mnYK on Monday January 31, 2022 @04:25PM (#30154638)
There are customer protections in the form of 1) escrow 2) seller reputation 3) seller depositing some risk capital at a selling platform. That said, customer protections have never really worked for me in fiat world.
Re:Did I just lose half a million dollars? by dralley on Sunday January 30, 2022 @11:32AM (#30138539)
That is not entirely true. Stock exchanges will reverse some clearly erroneous trades, even when they are not required to by law, because people trade more when they feel protected against mistakes.
Re:Did I just lose half a million dollars? by ddingus on Sunday January 30, 2022 @06:43AM (#30136173)
Good grief, this is like machine language for money
Re:Did I just lose half a million dollars? by mox1 on Sunday January 30, 2022 @09:21AM (#30137414)
exactly, with no-do overs. Everyone hand codes their assembly correctly on the first try right!?!!
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @11:11AM (#30138389)
There are plenty of do-overs, it's called the "development phase" and involves testing things on your local computer with the team.

No one gets everything right the first time, but with a lot of testing, you can actually write software that does exactly what you think it will do, and you can achieve pretty cool stuff. Remember that humans wrote the software that took humanity to the moon!

Re:Did I just lose half a million dollars? by UncleMeat on Sunday January 30, 2022 @12:37PM (#30139169)
As we know, no software has had bugs caught once launched to prod. The existence of some software that worked under this model is not evidence that it is a good model. "Just test prior to release" is not a complete solution.
Re:Did I just lose half a million dollars? by ddingus on Sunday January 30, 2022 @11:13AM (#30138405)
In this case, not really. User was calling a "ROM"

What you describe are dry runs.

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @11:20AM (#30138457)
Are you talking about the user from https://www.reddit.com/r/ethereum/comments/sfz4kw/did_i_just... ? And do you mean "read-only memory"? I'm not sure how that's relevant. The contract they made the transfer to is read-only yes, like any contract on Ethereum. But they could have tested the contract call with a smaller sum before actually performing the bigger one.

Just like the people writing the computer that took us to the moon, I'm pretty sure they tried it before in small-scale simulations before hooking it up to the rocket and letting it go to the moon.

Re:Did I just lose half a million dollars? by zepto on Sunday January 30, 2022 @12:00PM (#30138796)
The idea that people need to treat financial transactions in crypto as if they were writing software for a moon mission shows how impractical the entire space is.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @12:09PM (#30138879)
If that was the case, I'd agree with you. But as outlined in the comments of this submission time and time again, it was not what happened here.

The user was not doing a normal transfer (at least, they didn't want to, but they ended up doing). They didn't know what they were doing at all, a simply Google search would have showed them the way. Using UIs instead of interacting with the contract directly would have prevented them from making the mistake they did. Doing a small test transfer before doing the big one would have revealed what was wrong as well.

It's not that I'm comparing writing software for moon missions with making cryptocurrency transactions. I was directly replying to mox1 implying that writing 100% correct code is impossible and shouldn't be attempted.

Re:Did I just lose half a million dollars? by ddingus on Sunday January 30, 2022 @12:24PM (#30139028)
"simply Google search would have showed them the way"

That is how high toxicity systems get made.

Re:Did I just lose half a million dollars? by ddingus on Sunday January 30, 2022 @11:35AM (#30138569)
There is a difference!

The incentive was robust code that would work well, get it done, go to the moon.

Here, machine time is expensive, puts emphasis on code that works, but just barely...

Let's just say NASA would check for the "yup, you are gonna burn some money" case, and reject it.

Re:Did I just lose half a million dollars? by FDSGSG on Sunday January 30, 2022 @11:43AM (#30138630)
Well, there's about $3B worth of WETH issued and only about $1.1M worth of those have been lost due to mistakes like the OPs.

I think that people are so unlikely to fuck this up that such a check would be rather pointless.

Re:Did I just lose half a million dollars? by ddingus on Sunday January 30, 2022 @12:21PM (#30138992)
Again NASA would disagree.

Money matters a lot. Should this mess endure, people will forever be saying a little bit of gas would have been worth it.

And we've people with six figure arguments as to why such a check makes sense.

The idea of minimal code, focused on speed coupled with financials leads me FAR away from all this.

I will watch with great interest and entertainment.

Re:Did I just lose half a million dollars? by shadowgovt on Sunday January 30, 2022 @12:37PM (#30139173)
Should this mess endure, people will just keep using dollars and other fiat currencies.
Re:Did I just lose half a million dollars? by FDSGSG on Sunday January 30, 2022 @12:35PM (#30139141)
>Again NASA would disagree.

Yeah, because NASA has been utterly fucked by the congress. Because of politics it's better for NASA to spend 5x the money on 1 reliable spacecraft than to build 5 slightly less reliable spacecraft out of which only 1 fails.

Even if the economics of it don't make sense, NASA can't afford to be seen failing because because politicians will not want to fund them.

I guess my point is that NASA is an exceptionally badly managed entity, not something you'd want to aspire to. (Of course the people working at NASA are not the ones to blame for this.)

>Money matters a lot. Should this mess endure, people will forever be saying a little bit of gas would have been worth it.

That gas would probably add up to more money than has been lost here.

>And we've people with six figure arguments as to why such a check makes sense.

The gas fees of such a check would probably be higher than the losses averted, especially in the long run. And any "losses" are essentially distributed among all ETH holders anyway.

Re:Did I just lose half a million dollars? by ddingus on Sunday January 30, 2022 @12:40PM (#30139211)
"The gas fees of such a check would probably be higher than the losses averted, especially in the long run. And any "losses" are essentially distributed among all ETH holders anyway. "

This is also how high toxicity systems get made.

Re:Did I just lose half a million dollars? by FDSGSG on Sunday January 30, 2022 @12:45PM (#30139256)
The real solution is better client software. Doing these checks on the client-side is free, that's where they should live.

It would be stupid to put these checks in the contract, they would be very expensive and only help people using unsuitable client software.

Re:Did I just lose half a million dollars? by ddingus on Sunday January 30, 2022 @12:52PM (#30139327)
"It would be stupid to put these checks in the contract, they would be very expensive and only help people using unsuitable client software. "

You feel all client software will be suitable?

I don't. There is NO WAY. Lots of people will do ANYTHING for a bit of margin, hoping for volume.

Re:Did I just lose half a million dollars? by FDSGSG on Monday January 31, 2022 @04:56AM (#30146337)
>You feel all client software will be suitable?

Of course not. There will be more advanced software for expert users that allows them to manually create potentially riskier transactions. That's perfectly fine.

Client software targeting end-users should have such checks.

Re:Did I just lose half a million dollars? by ddingus on Monday January 31, 2022 @08:59PM (#30157688)
But it just won't. You read it here first.
Re:Did I just lose half a million dollars? by FDSGSG on Wednesday February 02, 2022 @05:13AM (#30175755)
This really doesn't line up with the reality of how most people are congregating around user friendly wallet software and steering away from the more advanced options.

You only one need one wallet software to be the official WETH-approved client, sucks for anyone else risking their money with unsupported software.

Re:Did I just lose half a million dollars? by ddingus on Thursday February 03, 2022 @01:23PM (#30196401)
I am quite happy to be proven wrong.

We shall see. And for me, safely and at a distance.

Frankly, the small cost of robustness in contracts should have been factored in from the beginning. It just does not need to be so damn lean and rickety.

The incentives are wrong here.

My prediction is the current state of affairs all gets ripped up and replaced after a time. And until that happens, we are likely to see activity largely limited to people who have a healthy appetite for risk.

Perhaps it all is as it should be too. Had the reverse been done, emphasis on slightly more expensive contracts that are robust and able to deny the costly errors, I would imagine others clamoring for people to adopt the rock bottom lean stacks...

What it won't all be is dull, will it?

Re:Did I just lose half a million dollars? by FDSGSG on Monday February 07, 2022 @05:42AM (#30242944)
There's a ton of money in providing good wallet software. Many people are making a killing by offering good UX, as offering good wallet software puts them in a prime position to offer profit-generating value added services like currency swaps.

>Frankly, the small cost of robustness in contracts should have been factored in from the beginning. It just does not need to be so damn lean and rickety.

It really doesn't seem necessary, more complicated contracts require custom frontends to interact with anyway.

Re:Did I just lose half a million dollars? by ddingus on Sunday January 30, 2022 @03:04PM (#30140579)
Sidebar:

How come such a check is so damn expensive?

It should not be.

Re:Did I just lose half a million dollars? by FDSGSG on Monday January 31, 2022 @04:58AM (#30146358)
I agree with you big time. This is hopefully something we'll see addressed by smart contract platforms in the coming years or decades.

Clearly Ethereum is far from a ready product, but I think we can expect to see massive improvements when proof of stake goes live this year.

Re:Did I just lose half a million dollars? by ddingus on Monday January 31, 2022 @09:01PM (#30157705)
Yes! It is all very interesting, but way too rough, IMHO.
Re:Did I just lose half a million dollars? by ddingus on Sunday January 30, 2022 @11:24AM (#30138484)
TL;DR: They could have got it right. Didn't.
Re:Did I just lose half a million dollars? by mox1 on Tuesday February 01, 2022 @09:38AM (#30162985)
Yes, and that code had bugs.

https://www.forbes.com/sites/lanceeliot/2019/07/16/apollo-11...

There are 0 do-overs on smart contracts in production. No stopping the network for a minute to triage, no rolling back a minute, no circuit breakers. No "Error 1202, do you want to continue?" pop-up messages.

Re:Did I just lose half a million dollars? by kwertyoowiyop on Sunday January 30, 2022 @06:12AM (#30135923)
“Premature optimization is the root of all evil.” And now in a whole new way!
Re:Did I just lose half a million dollars? by noduerme on Sunday January 30, 2022 @06:07AM (#30135878)
Back in the day or at least when I ran my own bitcoin node, any call against the blockchain was free. This sounds like someone charging for hitting the API on a rented node, as opposed to an actual cost imposed by the currency to consult the blockchain (?) But maybe the contract-generators aren't even running their own node, just piggybacking on someone else's API. Sure. Cheaper.
Re:Did I just lose half a million dollars? by riffraff on Sunday January 30, 2022 @06:23AM (#30136017)
AFAIU, smart contracts on the ethereum VM can be arbitrarily complex, so you pay the network to execute them, or a random user with an infinite loop would bring down the network.

You are indeed renting a machine to run some code, and if you want many people to use your code you want to make it cheap. There's a trade off.

You can fuck up things on the BTC blockchain too, "burning" crypto by sending it to a dead address has been a thing for a long time.

It always seemed stupid to me that it was possible, compared to sending money to an invalid IBAN, but I'm not a crypto enthusiast so I may be biased.

Re:Did I just lose half a million dollars? by noduerme on Sunday January 30, 2022 @07:23AM (#30136533)
On BTC, you could send things to the wrong address, yes. But you can't send the wrong type of currency or send it to a nonexistent address. In this case it seems like the contract has created the black hole (not the Ethereum blockchain itself), but that's even more absurd since someone ultimately should have control over everything that was put into the contract, regardless of the source.
Re:Did I just lose half a million dollars? by axiosgunnar on Sunday January 30, 2022 @08:38AM (#30137059)
> But you can't send the wrong type of currency or send it to a nonexistent address

Of course you can do both things, which is why catastrophic financial ruin is a daily fear when dealing with cryptocurrencies.

https://www.quora.com/How-can-I-find-my-Bitcoin-cash-that-I-...

Re:Did I just lose half a million dollars? by tim333 on Sunday January 30, 2022 @11:29AM (#30138528)
That's impressive, the number of scammers on that thread.
Re:Did I just lose half a million dollars? by EdwardDiego on Sunday January 30, 2022 @11:09AM (#30138363)
Oh wow, the "answers" on that question are cancer.
Re:Did I just lose half a million dollars? by liminvorous on Sunday January 30, 2022 @08:39AM (#30137071)
Sending currency to non-existant addresses is how people encode arbitary data on the bitcoin blockchain, so definitely possible.

Giving a person control over the funds allocated to their smart contract probably opens holes where they can steal the smart contract's money, though obviously creating software that handles money and can't be updated is its own kettle of fish.

Re:Did I just lose half a million dollars? by emteycz on Sunday January 30, 2022 @11:08AM (#30138349)
The thing is, the address exists - only (probably) nobody has its private key.
Re:Did I just lose half a million dollars? by EVa5I7bHFq9mnYK on Sunday January 30, 2022 @08:24PM (#30143341)
Why would one need to send to non-existent address? Any transaction can include data, one can donate for example.
Re:Did I just lose half a million dollars? by BatteryMountain on Sunday January 30, 2022 @05:02AM (#30135498)
It truly is laughable. Ever heard of "Return to Sender" in case of invalid events/transactions?
Re:Did I just lose half a million dollars? by SwiftyBug on Sunday January 30, 2022 @05:14AM (#30135564)
YES. Weren't these supposed to be SMART contracts? My email provider is smarter than that.
Re:Did I just lose half a million dollars? by lobocinza on Sunday January 30, 2022 @09:55AM (#30137701)
Every self-denominated SMART thing that I know of is DUMBER than the conventional thing.
Re:Did I just lose half a million dollars? by sanderjd on Sunday January 30, 2022 @08:51AM (#30137168)
"Smart contracts" was always a really bad name for this functionality.
Re:Did I just lose half a million dollars? by uwuemu on Sunday January 30, 2022 @09:13AM (#30137345)
What a joke.
Re:Did I just lose half a million dollars? by lottin on Sunday January 30, 2022 @10:18AM (#30137882)
A better term would be dumb contracts.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @06:43AM (#30136168)
First time I hear about IMAP/POP3 provider being able to "undo" emails after being sent. What provider are you using and how does that work behind the scenes? And no, gmails fake "we don't actually send it until you close the tab/wait 30 seconds so you can undo it" doesn't count.
Re:Did I just lose half a million dollars? by BatteryMountain on Sunday January 30, 2022 @07:11AM (#30136421)
Really? If a mail server (and the post office of most countries) don't have the specified address, it either gets sent back if there is a return address written (email non-delivery notice (aka return to sender, NOT undo) or it goes into a catch all bin (same as a lost & found)(or root account for most mail servers)(or dump it in the bin).
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @07:13AM (#30136442)
Yes yes, as mentioned in another sibling comment, your wallet won't allow you to send anything to an invalid address. In this case, the address was not invalid, so why expect it to get rejected?
Re:Did I just lose half a million dollars? by BatteryMountain on Sunday January 30, 2022 @10:06AM (#30137783)
So imagine the bank give all objects in their company an address. The desk has an address, the fridge has an address and so on. Bank accounts have an address too. All these addresses look the same and use the same system to interact with them. The problem is that Johnny wanted to deposit $50 dollar into his account, but he accidentally used the wrong address, and now the fridge in the the bank's kitchen on the 5th floor now owns $50. To his dismay, there is nobody to send his funds back since no human owns the fridge and nobody is even able to break the fridge open to get it out. Don't blame the fridge they say, don't blame the bank they say, don't blame the currency or the address system or the person who made the rules so that fridge addresses and bank account addresses work the same. No, lets blame Johnny, the dumb ignorant fool who doesn't understand the glory of the banks special addressing system. It is working as intended. He should've known better, he should've read the docs etc. Fuck Johnny and his $50.
Re:Did I just lose half a million dollars? by p49k on Sunday January 30, 2022 @09:28AM (#30137468)
You’re using a different definition of the word invalid.

Obviously the person you replied to meant invalid in the sense of “not intended to receive funds”

It would have been a competent design decision for a system to require some type of initial registration of intent to receive funds for an address in order for a transaction to post.

Re:Did I just lose half a million dollars? by oefrha on Sunday January 30, 2022 @07:00AM (#30136312)
I’m sure you’ve heard of it, but in case you haven’t, it’s called bouncing when there’s no valid inbox on the other end. Before you object, yes, you can set up a catch-all incinerator, but that’s not the default as is the case here, you have to explicitly set it up.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @07:09AM (#30136406)
"Bouncing" can happen in cryptocurrency world as well, it's called "sending to an invalid address". It just happens to be that the address-space is so big you don't really know what address has a real physical person behind it or not, or yet even.

Try sending cryptocurrency to an invalid address and you'll see that the wallet will reject sending it, just like email bouncing.

Re:Did I just lose half a million dollars? by oefrha on Sunday January 30, 2022 @07:30AM (#30136582)
Most people setting up mailservers don’t consider a catch-all forwarding to /dev/null a valid inbox. And no sane mailserver software forwards to /dev/null by default if you don’t explicitly tell it what to do when it receives email it isn’t supposed to receive.

A “valid” address locking up funds sent to it without recourse is /dev/null.

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @08:21AM (#30136941)
Hm, in order to clear up some (seemingly) confusion about how things work, let me offer you this explanation:

The user in the submission did not send funds to a invalid address. The address is valid, as otherwise funds wouldn't be able to be sent to it (the wallet would not allow you, nor the protocol, nor the miner/validators). The address happens to belong to a contract, that can also hold funds, similarly to accounts.

Now, every address/account/contract has a private-key behind it, that allows the owner of the private-key to transfer out of the address/account/contract, but it's impossible to know if the owner actually still has the private-key.

Similarly to how you can't know if [email protected] actually has access to his email account (maybe he forgot his password?), you can't know if an address actually has the possibility of moving the funds out of the address, as the private-key can have been thrown/forgotten/lost.

Re:Did I just lose half a million dollars? by oefrha on Sunday January 30, 2022 @08:42AM (#30137094)
I’ve made myself abundantly clear that WETH or whatever smart contract shouldn’t blackhole money by default when there’s no handler code, just like mailserver software shouldn’t blackhole emails by default. This is not a case of John making a mistake of forgetting their password, it’s ridiculous fallback behavior with unconsidered edge cases (or maybe considered but intentionally unhandled due to stupidly expensive compute). The design is atrocious and apparently it’s the default for all smart contracts.

The stakes are a little bit higher when you’re sending money instead of emails.

Re:Did I just lose half a million dollars? by noduerme on Sunday January 30, 2022 @07:55AM (#30136754)
This is the right way. Default behavior for any box should be to bounce. I forward all my wrong mail to a black hole but that's because I'm not a fucking smart contract
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @08:22AM (#30136952)
Again, if you try to send funds to an invalid address on Ethereum, you won't be able to. First the wallet will stop you if the address is invalid, secondly no miner/validator would pick it up from the mempool if the address is invalid and thirdly, no other party would agree that the address is valid and hence the transfer wouldn't go through.

Simply said: you cannot send funds to invalid addresses on Ethereum.

Re:Did I just lose half a million dollars? by NateEag on Sunday January 30, 2022 @12:04PM (#30138835)
But you can send funds to an address the funds cannot be retrieved from.

A protocol could conceivably require the recipient to verify they're holding the private key for the address before the transaction can take place.

Yet here we are.

Re:Did I just lose half a million dollars? by oblio on Sunday January 30, 2022 @07:02AM (#30136332)
> And no, gmails fake "we don't actually send it until you close the tab/wait 30 seconds so you can undo it" doesn't count.

Why doesn't it count and why does it matter how Gmail works behind the scenes?

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @07:10AM (#30136413)
Because that feature of gmail is not a part of email, it's a part of gmail the product. And it is not "undoing" sending a sent email, it's cancelling an email that was never sent in the first place.
Re:Did I just lose half a million dollars? by ipaddr on Sunday January 30, 2022 @09:25AM (#30137441)
Because email doesn't work that way. Gmail doesn't send the email for a minute. It would be like your boss asking you to send this email and you wait a minute for him to change his mind before you presses send.
Re:Did I just lose half a million dollars? by noduerme on Sunday January 30, 2022 @05:16AM (#30135578)
Yeah. Even in the original bitcoind API you would run a validation call on the address and the spend before actually committing it. Afaik you couldn't accidentally send coins into a black hole even if you tried.
Re:Did I just lose half a million dollars? by riffraff on Sunday January 30, 2022 @06:27AM (#30136048)
I think the address was valid, the problem is that there is no way of getting the coins out of it.

The same thing was done on the bitcoin chain, e.g. counterparty[0] was relying on a "proof of burn" which was basically "Send BTC to a black hole".

[0] https://counterparty.io/docs/faq-xcp/

Re:Did I just lose half a million dollars? by noduerme on Sunday January 30, 2022 @07:25AM (#30136546)
If no one ever moved coins out of their burn addresses I'll eat my socks.
Re:Did I just lose half a million dollars? by uxp100 on Sunday January 30, 2022 @09:04AM (#30137282)
Uh, do you really like socks that much? I think this is something very easy to verify, just look at the burn address on the chain?
Re:Did I just lose half a million dollars? by GaylordTuring on Sunday January 30, 2022 @11:40AM (#30138612)
Just monitor this address then and let me know if anyone moves anything out of it :) https://etherscan.io/address/0x00000000000000000000000000000...
Re:Did I just lose half a million dollars? by RedShift1 on Sunday January 30, 2022 @05:41AM (#30135695)
The thing is that is not an invalid transaction. The problem is in what happens _after_ the smart contract has received the money.
Re:Did I just lose half a million dollars? by noduerme on Sunday January 30, 2022 @07:59AM (#30136789)
As far as Ethereum is concerned it's valid, but the contract API is riding on top of Ethereum's blockchain. It's middleware. It's responsible for enforcing the contract. How does it have a giant black hole in it?
Re:Did I just lose half a million dollars? by RedShift1 on Sunday January 30, 2022 @10:54AM (#30138218)
It's the same as you and I agreeing on a contract where it says when you send me money, I will burn it. If you then use a bank transfer to me, it's not the bank's fault your money is gone, we agreed on that contract and it's not the bank's business to deal with that. Doesn't mean that there shouldn't be safeguards, there absolutely should be, but just laying out where the responsibilities start and stop and the whole deal with crypto currency is the absence of central control so if you choose to shoot yourself in the foot, you're free to do so. But freedom of action doesn't mean freedom of consequences and in the case of a blockchain, it's forever.
Re:Did I just lose half a million dollars? by shadowgovt on Sunday January 30, 2022 @12:39PM (#30139191)
> it's not the bank's fault your money is gone, we agreed on that contract and it's not the bank's business to deal with that.

There's a reason some contracts (in the regular legal world) are illegal.

Re:Did I just lose half a million dollars? by sanderjd on Sunday January 30, 2022 @08:48AM (#30137149)
It was a really bad design decision to have smart contracts have this "send to the address" capability, rather than requiring clients call a method that is explicitly defined.
Re:Did I just lose half a million dollars? by Maursault on Sunday January 30, 2022 @09:55AM (#30137700)
> he sent tokens to smart contract's address and they will stay there forever, not associated with any account.

Wait... so the tokens are really still there, just inaccessible? In what way do the tokens still exist? What makes them inaccessible? Is there really no possibility of restoring the tokens? No possibility of cleverly hacking them out with the assumed myriad of unpublished security flaws?

Re:Did I just lose half a million dollars? by pie_flavor on Sunday January 30, 2022 @10:46AM (#30138129)
The tokens are a number in a hash-map of user to balance in the weth program. Any eth program ("smart contract") can be a user. All the smart contract that owns the tokens has to do is tell the weth smart contract to transfer them, or approve mister redditor to transfer them on the contract's behalf. But that contract wasn't built to do such a thing. And now that it's published, it also can't be updated to do such a thing. A new contract could be uploaded, but that new contract won't be the same user. So they're just gone for good. Hope that cleared things up.
Re:Did I just lose half a million dollars? by triangleman on Sunday January 30, 2022 @11:29AM (#30138523)
So, could the Ethereum community get together and agree to rewrite the blockchain and undo this transaction? Perhaps they could vote on it and have a hearing of the facts. Of course that introduces its own tyranny but is it possible?
Re:Did I just lose half a million dollars? by GaylordTuring on Sunday January 30, 2022 @11:44AM (#30138637)
It is possible. That's why you have Ethereum and Ethereum Classic, two different chains. The latter one is the unaltered chain, while Ethereum (which is the most popular that's everybody are using) has been forked in such a way that you're describing once after a large hack.
Re:Did I just lose half a million dollars? by shadowgovt on Sunday January 30, 2022 @12:41PM (#30139222)
Specifically, it forked because even though the system is specifically designed to make rewriting history impossible, the hackers screwed so many users that they decided to undo it by ignoring history and starting from before the hack.

... Lest anyone ever think Blockchain tech is somehow immune to network effects and social considerations.

Re:Did I just lose half a million dollars? by drdeca on Sunday January 30, 2022 @08:12PM (#30143236)
Technically, rather than ignoring history and starting from before the hack, they added a nonstandard transaction (not generally allowed) which reversed the effects of the hack. This did not revert other transactions that happened after the hack.

But, yes, blockchain stuff is fundamentally based on consensus about what the rules are, and people/organizations with more social influence can [...] .

Re:Did I just lose half a million dollars? by monktastic1 on Sunday January 30, 2022 @11:37AM (#30138589)
The chain is by nature append only, so you'd have to fork it, which they sure as hell are not going to do for a "little guy," to put it mildly. At least, that's my layman's understanding.
Re:Did I just lose half a million dollars? by shadowgovt on Sunday January 30, 2022 @12:45PM (#30139265)
Yep. Little users can still get screwed, but players too big to fall get to make up new rules.

... Reminds me of another financial infrastructure I know.

Re:Did I just lose half a million dollars? by bigtex88 on Sunday January 30, 2022 @10:47AM (#30138139)
In simple words, he should have done what everyone else does and used Uniswap or Zapper or Sushi or ANY exchange and swapped WETH for ETH that way.

This is just a dumbass user doing dumbass things. This is basic-level stuff right here. Don't interact with contracts directly unless you 100% know what you're doing.

Re:Did I just lose half a million dollars? by UncleMeat on Sunday January 30, 2022 @10:56AM (#30138226)
But people are allowed to interact with smart contracts. To obtain the WETH he needed to do that. This is a "why do we even have that lever" kind of situation. If my brokerage had a "permanently burn all of your money" button then it wouldn't be reasonable to just say "well, people shouldn't push that button."

We can even see this with the criticism of wire fraud. Wire fraud is a huge fucking mess that occasionally costs people their life savings. The entire setup is rightly criticized (heck, even by the crypto community) for having users interact with a highly error-prone system with huge consequences.

Re:Did I just lose half a million dollars? by emteycz on Sunday January 30, 2022 @11:08AM (#30138359)
People are allowed to login as root and delete their systems too. Yes, today's software doesn't make it easy - and the same can be said about this wallet/token; this was a complex sequence of steps in the wrong direction, not a missclick.
Re:Did I just lose half a million dollars? by UncleMeat on Sunday January 30, 2022 @12:33PM (#30139126)
And a lot of ink is spilled about systems to make this very difficult, with people continuing to work to improve things. We didn't simply say "well, just don't type those characters" and move on with our lives.
Re:Did I just lose half a million dollars? by emteycz on Monday January 31, 2022 @06:41AM (#30146966)
Exactly like in this crypto case.
Re:Did I just lose half a million dollars? by dpark on Sunday January 30, 2022 @11:09AM (#30138368)
People don’t usually store 500k on their PCs.
Re:Did I just lose half a million dollars? by emteycz on Sunday January 30, 2022 @11:10AM (#30138377)
But people run production servers on their PCs all the time.
Re:Did I just lose half a million dollars? by dpark on Sunday January 30, 2022 @11:30AM (#30138534)
The set of people running a service with a revenue of 500k on a personal device must be minuscule and the people doing it almost certainly know it’s stupid.

This is qualitatively different from crypto that allows you to burn your money on accident, while the people who build the infrastructure for this tell you is a smart, safe place to put your money.

Re:Did I just lose half a million dollars? by emteycz on Sunday January 30, 2022 @03:15PM (#30140671)
If you wire money to a Nigerian prince, it's gone too. Doesn't mean a bank is not a safe place where to put your money.
Re:Did I just lose half a million dollars? by dpark on Sunday January 30, 2022 @05:52PM (#30142085)
Interesting how your example has just completely changed.

But also, wiring money is a thing that laypeople almost never do. It’s nerve wracking to wire money. But the equivalent in cryptocurrency is just how it’s done. Every transaction is just a fuckup with no recourse waiting to happen.

Re:Did I just lose half a million dollars? by emteycz on Monday January 31, 2022 @03:46AM (#30145901)
What's so interesting? I already told you this wasn't a simple missclick. No need to reiterate.

You can dump money into a pit just as easy with the classic banking system. Where I live (EU), wiring money is the primary way of payments and money transfers. People don't use anything else.

Re:Did I just lose half a million dollars? by dpark on Monday January 31, 2022 @09:26AM (#30148198)
> I already told you this wasn't a simple missclick.

Seems like it essentially was. He exchanged ETH for WETH in exactly the same way. Assuming that the reverse would work (as opposed to destroying the money) was not an unreasonable step. He still screwed up, but a design that allows this is user hostile and stupid.

> You can dump money into a pit just as easy with the classic banking system. Where I live (EU), wiring money…

In the US at least, you can get your money back through the legal system. Accidentally dropping your money into someone else’s account does not give them a right to it and for substantial amounts of money people can and do get their money back.

For this amount of money I’d consider pursuing legal avenues against the developers of Etherium. This design seems borderline negligent and Etherium has modified the code at least once already to force a refund.

Re:Did I just lose half a million dollars? by emteycz on Monday January 31, 2022 @11:29AM (#30149842)
Consumer wallet software gives you a warning that this is probably not what you want.

> In the US at least, you can get your money back through the legal system. Accidentally dropping your money into someone else’s account does not give them a right to it and for substantial amounts of money people can and do get their money back.

I doubt this is true in the case of uncooperative out-of-country second party - yeah they have no right to the money, but they don't care and the legal system won't do much for you.

Re:Did I just lose half a million dollars? by dpark on Monday January 31, 2022 @12:55PM (#30151329)
Did this guy get a warning?

I still find the wire transfer comparison lacking, mostly because one shitty design does not justify another.

Re:Did I just lose half a million dollars? by emteycz on Tuesday February 01, 2022 @06:45AM (#30161298)
If this guy didn't get a warning, they're using power-user software (likely CLI-based).

Of course one shitty design doesn't justify another, but the point is not justification but a reply to all the people saying "this is way worse than and would never happen with the traditional banking" that they are wrong. I agree that better UX is needed.

Regarding your point about legal action against Ethereum designers, well... That'd be like pursuing legal action against the designers of your web browser because it allows you to open phishing sites. Nonsense IMHO.

Re:Did I just lose half a million dollars? by dpark on Sunday January 30, 2022 @11:09AM (#30138360)
> This is just a dumbass user doing dumbass things.

I tend to agree. Dumbasses clearly designed this system if it allows money to be accidentally destroyed. Dumbasses doing dumbass things indeed.

Re:Did I just lose half a million dollars? by throwhauser on Sunday January 30, 2022 @11:19AM (#30138450)
> Don't interact with contracts directly unless you 100% know what you're doing.

But if you use any of the exchanges you described, you have to trust that they 100% know what they're doing.

It seems safer to avoid smart contracts and cryptocurrencies altogether.

Re:Did I just lose half a million dollars? by hedora on Sunday January 30, 2022 @10:18AM (#30137887)
From what I can tell, the underlying issue is that everything is spaghetti code written in a dynamically typed language.

Ignoring that, it's nuts that the best practice is "send a little money, and see if it works". Apparently they don't even have a working transaction simulator that just runs the relevant logic on your laptop so you can see what it will do.

Re:Did I just lose half a million dollars? by xmaayy on Sunday January 30, 2022 @10:40AM (#30138058)
I think you can do test transaction off-chain, I think they're called test-nets and you can use them through many wallets, and even online IDE's[1]. Unfortunately, crypto is still at the stage where it's built for devs and technically minded individuals, and its pretty user hostile. Sending directly from wallet to wallet is a pretty low level thing to do, and generally people should be executing transactions through swaps or other DAPP's, which to me seems like we're working against the empowerment principle of crypto

[1] https://remix.ethereum.org/

Re:Did I just lose half a million dollars? by te_chris on Sunday January 30, 2022 @11:41AM (#30138615)
Look at NFTs. The empowerment pricnciples are being actively killed by millions of VC dollars. Opensea are nominally recording transactions on a blockchain - but none of the actual meat. Everything 'real' lives inside their centralised system.
Re:Did I just lose half a million dollars? by kylebenzle on Sunday January 30, 2022 @02:49PM (#30140433)
A LOT of people are doing it wrong but there are still good projects out there. The two that come to mind are Monero and Bitcoin Cash. Both still work as designed and have low fees and/or instant and/or anonymous transactions.
Re:Did I just lose half a million dollars? by EVa5I7bHFq9mnYK on Sunday January 30, 2022 @07:47PM (#30143027)
The underlying issue is that everyone wants to make money. And the quickest way to make money in crypto is to create a new coin, token, smart contract, NFT, web3, whatever. Thus ever increasing complexity.
Re:Did I just lose half a million dollars? by Zababa on Sunday January 30, 2022 @04:16PM (#30141189)
> Ignoring that, it's nuts that the best practice is "send a little money, and see if it works".

That's what I did the first time I did a bank transfer between two of my banks accounts. Maybe that's just me being paranoid but when sending money I like to test it first.

Re:Did I just lose half a million dollars? by tata71 on Sunday January 30, 2022 @08:48PM (#30143510)
> Ignoring that, it's nuts that the best practice is "send a little money, and see if it works".

This passes the "does it sound like email?, it might be decentralized!" smell test, anyway.

Re:Did I just lose half a million dollars? by kall on Sunday January 30, 2022 @11:14AM (#30138414)
I think you can do just that with ganache-cli.

I haven‘t tried it, because I don‘t do much crypto stuff at all, but I thought this specific functionality, to dry-run any scenario, from any account, was very intriguing.

Re:Did I just lose half a million dollars? by fortran77 on Sunday January 30, 2022 @11:12AM (#30138395)
> From what I can tell, the underlying issue is that everything is spaghetti code written in a dynamically typed language.

We need to re-write this in Rust before there can be universal acceptance!

Re:Did I just lose half a million dollars? by nailer on Sunday January 30, 2022 @01:51PM (#30139908)
Already done and it’s already processed more transactions than ethereum and bitcoin have in their entire history combined, as well as having more developers.

https://news.ycombinator.com/item?id=30135054

Re:Did I just lose half a million dollars? by buster on Sunday January 30, 2022 @11:41AM (#30138622)
As much as I like rust and think this would help increase acceptance for many tech affine people, this issue was a bad design decision, which is even worse. I don't think I will touch anything crypto until I can trust that the system is designed well.
Re:Did I just lose half a million dollars? by landemva on Sunday January 30, 2022 @04:30PM (#30141330)
You can code in whatever can compile to byte code for the EVM. Solidity is typically the language and is statically typed. https://docs.soliditylang.org/en/v0.8.11/types.html
Re:Did I just lose half a million dollars? by thiagobbt on Sunday January 30, 2022 @01:48PM (#30139877)
I believe most contracts on the Solana network are written in Rust
Re:Did I just lose half a million dollars? by derivagral on Sunday January 30, 2022 @10:33PM (#30144146)
https://ethereum.org/en/developers/local-environment/

several of these projects will set up a local chain with presets to test exactly this. probably worth doing before sending large amounts to random contracts.

Re:Did I just lose half a million dollars? by kylebenzle on Sunday January 30, 2022 @02:47PM (#30140421)
How can you be so naive about this topic yet confident enough to add your 2 cents? There are been test nets from day one and running one yourself is trivial.
Re:Did I just lose half a million dollars? by anthonygd on Sunday January 30, 2022 @08:11PM (#30143226)
Realistically if you just want to try out someone else's contract in a safe environment, the existence of the test nets is entirely irrelevant.

The contract is going to be at a different address, all the accounts involved are entirely different, the state of the contract is different. Even proving a contract at one address is the same as the contract at another address is non-trivial.

Pretending the existence of a test net proves anything is a lot like pretending the availability of source for your OS, compiler and dependency stack proves something. Maybe possibly for a professional with unlimited time, but that's it.

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @07:07AM (#30136379)
It's not really edge bases, it's how contracts works, and how this contract works.

There is nothing magical here. It's a bit like avoiding the checksums that IBAN has, and then complaining that IBAN is broken. Most people interact with WETH via UIs, but for some reason this user chose not to, and got severely burned because of it.

Things that require expertise usually requires one to know acronyms and how things works underneath, the cryptocurrency space is no different.

Now I don't know what you do for a living, but it certainly isn't cryptocurrencies. I'm sure there are more industries you don't work with on a day-to-day basis, and when people who are in those industries talk with each other on a technical level, you'll see the same amount of jargon. That's just part of expertise in a subject.

For example, two of my friends are chemists, and sometimes they talk chemistry stuff when we're having dinners and stuff. Of course I don't understand most of the stuff they are saying, but I'm not gonna claim "chemistry" is "magical knowledge" just because I don't understand it, so I'm not sure why you would about cryptocurrencies.

Re:Did I just lose half a million dollars? by sshine on Sunday January 30, 2022 @07:34AM (#30136610)
Or like sticking the wrong plastic card into an ATM and observe the machine eat the card... and your bank account.

You'd expect that invalid actions lead to idempotent errors, not glitch states where you lose everything.

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @08:14AM (#30136893)
> You'd expect that invalid actions lead to idempotent errors, not glitch states where you lose everything.

Indeed, and that's exactly how most cryptocurrencies work today. You try to send funds to an invalid address, the wallet will present you with an error that you cannot do that.

The user in the submission did not perform an invalid action, because they wouldn't be able to perform an invalid action.

Re:Did I just lose half a million dollars? by zkldi on Sunday January 30, 2022 @08:39AM (#30137070)
So your definition for "valid action" is just that the eth network lets them do it?

They clearly didn't want to burn £500k, and that is now irrecoverable, alongside 260 other people who made the same mistake, on a smart contract that forgoes validation for gas fees.

How is this not invalid?

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @08:49AM (#30137159)
> So your definition for "valid action" is just that the eth network lets them do it?

Yes, this is indeed the definition for "valid", that the protocol allows them to do it.

It was a valid action, but not the action the user actually wanted to perform. There are two ways of avoiding these scenarios: A) use UIs and don't interact with the protocol without safeguards, as the UI will prevent you from making mistakes (this user interacted directly with the contract, not via a UI) and B) when doing something involving a lot of money, do it once first with a small percentage, so you can verify it's correct (this user didn't do this either).

For example, I know that IBAN has checksum built into the "address" and that the bank could revert transfers, but if I make transfers above a certain sum, I always send a small amount first, make the recipient confirm how much they received (I send a small random sum) and only then do I perform the larger transfer.

As I mentioned elsewhere in the comments on this submission (https://news.ycombinator.com/item?id=30136941), it's impossible to know if someone actually has access to an address or not, so why would the wallet stop them from sending it?

Re:Did I just lose half a million dollars? by ClumsyPilot on Sunday January 30, 2022 @10:05AM (#30137773)
"It was a valid action, but not the action the user actually wanted to perform."

It's an action noone ever has ever wanted or ever will want to perform.

In the same way putting your finger inside a power socket is an invalid action, and people who designed sockets were smart enough to make it impossible.

Re:Did I just lose half a million dollars? by GaylordTuring on Sunday January 30, 2022 @11:52AM (#30138713)
"It's an action noone ever has ever wanted or ever will want to perform."

That's not entirely true. Just look at one of the many burn addresses that people willingly send money to all the time, for example: https://etherscan.io/address/0x00000000000000000000000000000...

For example, some holder (maybe a founder) of a certain coin can burn a certain amount of their tokens, making it more rare. This is a quite common practice. If I were to burn a certain amount of tokens, I think the most natural thing to use as a burn address would be the contract address itself.

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @10:21AM (#30137912)
The only thing you're showcasing here is the lack of understanding of what happened.

This transfer was a transfer from one address to another. No one has ever wanted to do that? It's the entire point of cryptocurrencies!

Re:Did I just lose half a million dollars? by mlyle on Sunday January 30, 2022 @11:36AM (#30138584)
Making it easy to build contracts that will accept resources and then never do anything with them, destroying the value, is a design mistake.

This is something the developer of the contract should explicitly opt into. As others pointed out, if everything a contract did was via explicit methods, rather than transfers, this type of defect would never have been created.

Re:Did I just lose half a million dollars? by halfmatthalfcat on Sunday January 30, 2022 @10:53AM (#30138201)
And this mentality is what will block wider adoption of crypto. Calling people dumb for not understanding a non-intuitive system (after there's so much prior, "return to sender" art in the world) will not get them to use crypto.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @10:58AM (#30138246)
Sure, I have no desire for cryptocurrency to get a wider adoption, I have no skin in the game, I'm just looking at the facts. I don't care if the space burns up or saves the world, for me is the same.

This is not the case of a non-intuitive system screwing the user. This is the user purposefully avoiding using the intuitive systems setup for them, and interacting with something directly even though no one does that unless you're a developer. This person has half a million dollars worth of X, while not understanding X.

> (after there's so much prior, "return to sender" art in the world)

That's awesome that you have come up with a solution for this, while the ecosystem hasn't been able to. Could you share your solution?

It's a hard problem to solve in a system that has to A) be decentralized, B) work when less than half the network is trying to screw you and C) prevent double-spending

"return to sender" sounds easy to implement in a centralized system, but it's not that simple for a decentralized one. At least not until you release your solution.

Re:Did I just lose half a million dollars? by warkdarrior on Sunday January 30, 2022 @04:00PM (#30141035)
> This is the user purposefully avoiding using the intuitive systems setup for them, and interacting with something directly even though no one does that unless you're a developer.

Of course using the intuitive systems setup for the means that one has to trust some random people or companies, instead of going directly to the blockchain. What happened to trustless?

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @05:45PM (#30142035)
"Trustless" is referring to the consensus in the protocols, not to the entire ecosystem. This is a ecosystem built by and for humans, of course there will be trust involved.
Re:Did I just lose half a million dollars? by SantalBlush on Sunday January 30, 2022 @10:43AM (#30138092)
You are intentionally misrepresenting the parent comment. The point is not that nobody should be able to transfer from one address to another, and pretending otherwise is pretty dishonest.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @10:54AM (#30138212)
But then please share with me what the argument is? The user made a transfer that shouldn't have been done in the first place, and somehow people are saying that the protocol should have safe-guards against doing transfers to the wrong address, but how is the protocol supposed to know what address is right/wrong? There is literally no distinction between them, so therefore you need to allow any transfer, or no transfer.
Re:Did I just lose half a million dollars? by yifanl on Sunday January 30, 2022 @11:17AM (#30138438)
So I guess, when it comes down to the wire, what wins out, the needs of real users, or the documented description of a protocol?

The fact that said protocol is incapable of addressing real needs is a failure state, and historically this has been addressed by building better tooling on top of the protocol, or replacing it wholesale.

Re:Did I just lose half a million dollars? by CRConrad on Tuesday February 01, 2022 @05:22PM (#30170343)
> The user made a transfer that shouldn't have been done in the first place, and somehow people are saying that the protocol should have safe-guards against doing transfers to the wrong address, but how is the protocol supposed to know what address is right/wrong?

Sure, the user sent stuff to the wrong address... Or did he? Seems, rather, that he sent the wrong kind of stuff. Had he sent, whateveritwas, WETF in stead of WETH or vice versa, then it would have gone right.

So then it seems the receiving thingamajig was at least as much at fault: It accepted (and just swallowed) a kind of stuff it shouldn't receive. It's like, say, a one-way currency-changing ATM that takes dollars and returns euros. If you feed in euros by mistake, it fucking obviously should just spit them back out (and preferably display or print an error message, "Wrong currency: Gimme dollars to get euros.") You're saying just swallowing your euros would be a "valid" behaviour for that machine.

That's so obviously bullshit that the only remaining mystery here is whether you're actively trying to defend what you know is indefensible, or actually so deluded that you've somehow convinced yourself this bullshit is true. Well, no, not the only one: The other mystery is, which is worse?

Re:Did I just lose half a million dollars? by SantalBlush on Sunday January 30, 2022 @01:13PM (#30139530)
>how is the protocol supposed to know what address is right/wrong?

It's the "right" address for certain transactions--like turning ETH into WETH--but the "wrong" address for other transactions, which makes the whole thing a garbage design. You can say "that's just the way Ethereum/crypto/smart contracts work" all day, but it doesn't matter.

Most people don't care why the design is bad, they just care that it is bad, and that there are better theoretical (or real) alternatives to this tech.

Re:Did I just lose half a million dollars? by magicjosh on Sunday January 30, 2022 @11:47AM (#30138665)
Your analogies make sense to me. Sounds a lot like running a system on Linux. Or maybe assembly is a better metaphor. I like the analogy about avoiding all the safety mechanisms on an electric line and jamming your hand in there...the grid can't tell the difference.

The arguments here are odd. The blockchain isn't built to handle this kind of operation by a non-expert user. Yes, mistakes are expensive. Is that okay? In the same way that a nuclear power plant isn't designed for a rando to go in and operate it.

Yes, raw blockchain stuff is hard and non-experts should not interact directly.

The key question is, is the payoff worth building an entire system around? For nuclear power, yes, because it provides electricity for people to just plug into. For blockchain, maybe, maybe not.

Re:Did I just lose half a million dollars? by dragonwriter on Tuesday February 01, 2022 @06:06PM (#30170949)
> The blockchain isn't built to handle this kind of operation by a non-expert user.

But the blockchain in general and smart contracts especially are pretty expressly supposed to be, that is, central to trustlessness is not requiring some elite priesthood as an intermediary (either personally or as trusted purveyors of overlay systems) between end users and the authoritative system.

Re:Did I just lose half a million dollars? by ClumsyPilot on Sunday January 30, 2022 @10:47AM (#30138132)
Sticking your dick into a socket results in transfer of electrons from one object to another, thats the entire point of the electric grid! Clearly it's designers had no need to design circuit breakers, ground fault circuit interrupters, etc.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @11:01AM (#30138279)
I can feel your fists of fury through the screen!

Listen, in this case, there already is circuit breakers, ground fault circuit interrupters and more to prevent problems to happen in the first place. The wallet is the first guard against this, the UIs the various services provide is another, and so on.

But when the user bypasses those and interact directly with the chain, which is not recommended for people who don't know what they are doing, problems can happen.

The same as if someone bypasses all those checks you wrote about, and then complains that they got a ton of electricity zapped into them. Why doesn't the grid just know that it was a human and not something else and stopped sending electricity?!

Reality is not that simple.

Re:Did I just lose half a million dollars? by leokennis on Sunday January 30, 2022 @04:37PM (#30141379)
You know what happens when you transfer money to a non-existent/incorrect IBAN?

Most likely your bank will reject the transaction and not even defund your account - as you mentioned, the IBAN itself is already designed to prevent human error.

If by chance you “crafted” a technically MOD-97 valid but not existing IBAN and the money goes out to the other bank (PACS.008), the other bank cannot book it (as the account doesn’t exist) and should automatically return it to you (PACS.004).

If by chance the other bank is incompliant and does not return the money, you can have your bank send a recall message (CAMT.056) to try and retrieve the funds. The other bank is then compelled to either refund the money (PACS.004 again) or at the least officially communicate they’re keeping your money (CAMT.029).

At that point, there’s still law and legal avenues to pursue.

One thing that does not and can not happen though, is for the money to vanish into a black hole and be removed from the economy. That is what a stable, standardized and reasonably regulated industry with some centralization does for you.

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @05:48PM (#30142055)
You know what happens when you send Ether to a incorrect Ethereum address? The wallet will reject sending it. If you bypass the wallet and rewrite your own wallet to send it anyways, the validators reading from the mempool will reject it. If you rewrite your own validator to accept it anyways, no other validator will accept it and the transfer will never go through.

What happened here is more like you used IBAN to send to the correct account, the correct bank and everything was correct, but no one actually has access to the account but the bank doesn't know this.

Nothing has vanished or been removed.

Re:Did I just lose half a million dollars? by giaour on Sunday January 30, 2022 @09:47AM (#30137624)
As far as I can tell, no one has argued that transaction validation for this specific smart contract should be built into wallets. You're arguing with a straw man.

The point I see made instead is that the smart contract should not be coded to behave as it does. If a financial product at a retail bank set a pile of cash on fire when you used it incorrectly, regulators would swoop in and make the industry add some safety features, even if that safety came at the cost of convenience.

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @10:25AM (#30137938)
It's very hard to draw parallels from cryptocurrencies to other things as it's not like other things we have today.

Some sort of analogy could be margin calls/puts. Imagine someone who doesn't know how margin trading works used it, and lost half a million dollars. Who's at fault here? The bank for allowing it, the financial system for having the feature or the user for not educating themselves enough to understand how it works?

Re:Did I just lose half a million dollars? by giaour on Sunday January 30, 2022 @12:25PM (#30139038)
> Some sort of analogy could be margin calls/puts.

That is not a comparable situation. The ETH/WETH trader misused a negotiable instrument, and 500K disappeared forever. Someone who loses 500K gambling on margin was gambling and lost. If they somehow mistakenly placed an order on margin, there's probably a process to reverse the transaction and get your funds returned within a specific time window (that's just a guess on my part, though, and it probably depends on the brokerage used).

> It's very hard to draw parallels from cryptocurrencies to other things as it's not like other things we have today.

I don't think this is true; cryptocurrency in this situation is very similar to cash. You can get mugged while holding 500K in a briefcase, and the funds are unrecoverable absent legal restitution. But that's why banks make you sign a waiver of liability when you withdraw large sums in cash.

Re:Did I just lose half a million dollars? by UncleMeat on Sunday January 30, 2022 @11:03AM (#30138306)
> Yes, this is indeed the definition for "valid", that the protocol allows them to do it.

I believe that this, right here, is the core disagreement surrounding the utility of cryptocurrencies. There are two orientations to think about software. One is the software orientation and one is the human or problem orientation. "It did what the software says" is a defense often used by crypto advocates who point out, rightly, that there are very strong guarantees that cryptocurrencies provide and other things that they completely do not guarantee. Other people point to the mismatch between the guarantees that cryptocurrencies provide and the actual failure modes that are very common in the real world and complain that advocates seem to be completely ignoring these issues.

I think a relevant comparison is security vulnerabilities in traditional software. If you've got a program that is exploitable through a buffer overrun that enables arbitrary code execution, the program is behaving precisely as programmed. From the perspective of the program and the computer, there is no difference between ordinary operation and the exploit. But from a human perspective one of these behaviors is expected and one is both unexpected and undesirable. And the "well, just don't fuck up your C program" argument is basically failed at this point, for good reason. I would expect to see the same in the crypto space.

Re:Did I just lose half a million dollars? by TimJRobinson on Sunday January 30, 2022 @10:09PM (#30144038)
`rm -rf /` is a perfectly valid action, but lots of people still get burnt accidentally running it.
Re:Did I just lose half a million dollars? by axiosgunnar on Sunday January 30, 2022 @08:41AM (#30137093)
Nobody is worried about sending funds to „foobar“. People are worried about sending funds to a syntactically valid address that no one has access to.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @08:45AM (#30137126)
This is impossible to solve, in the cryptocurrency space or in the existing structures we have. When you send an email, you cannot know if someone actually has access to that account (maybe they forgot their password?), you can only know if the address is valid or not (by sending the email). Similarly, you don't know if the right person has access to the bank account you're sending funds to, unless you ask the person who is supposed to have access, if they actually can access it.
Re:Did I just lose half a million dollars? by Adrox on Sunday January 30, 2022 @12:31PM (#30139099)
You can NEVER send a bank account transfer to a UNASSIGNED IBAN, the bank will just reject it after some days.

If you sent a IBAN transfer someone will get the money. You transfer to someone else that gets the money and you could try to go to court.

The money just doesn’t disappear like in crypto.

The e-mail is a great example, the e-mail can be lost, thats why no bank ever made transfer over email! You loose the e-mail text, not 500.000$!

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @05:49PM (#30142064)
Since this has already been answered multiple times in this submission already, I'll leave you with this:

> You know what happens when you send Ether to a incorrect Ethereum address? The wallet will reject sending it. If you bypass the wallet and rewrite your own wallet to send it anyways, the validators reading from the mempool will reject it. If you rewrite your own validator to accept it anyways, no other validator will accept it and the transfer will never go through.

> What happened here is more like you used IBAN to send to the correct account, the correct bank and everything was correct, but no one actually has access to the account but the bank doesn't know this.

Re:Did I just lose half a million dollars? by mlyle on Sunday January 30, 2022 @01:58PM (#30139975)
> This is impossible to solve,

Let's talk about putting safety rails around large drops.

They should never be necessary with careful use.

And they can't prevent everyone from falling to their death.

But they still prevent some harms, so we generally require them to be present.

Design to do everything with contracts through methods instead of transfers to contract addresses would make this particular type of failure impossible. There would still be other ways to screw up and lose money on accident, of course. But any way that can be reasonably eliminated and isn't, is a design flaw.

Re:Did I just lose half a million dollars? by emteycz on Sunday January 30, 2022 @11:06AM (#30138335)
SMTP servers are able to reply whether a user exists, and some still do. Your own server will send you a "undeliverable" message if it receives a negative reply.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @11:22AM (#30138475)
Yes, but that's different. That checks if the user exists, not if the person behind the user actually has access to that user.
Re:Did I just lose half a million dollars? by bigtex88 on Sunday January 30, 2022 @10:48AM (#30138147)
It's not an invalid action. This was a valid action, it was just a stupid ass action.
Re:Did I just lose half a million dollars? by SilasX on Sunday January 30, 2022 @11:09AM (#30138366)
Haha, that’s why the client software needs Nick-Fury-style safeguards to say “I understand that this a valid transaction, but given that it’s a stupid-ass transaction, I’ve elected to throw a warning.”
Re:Did I just lose half a million dollars? by kuhewa on Sunday January 30, 2022 @07:12AM (#30136429)
Currencies don't come with a prerequisite of intimate knowledge of industrial jargon that requires use on a daily basis to be proficient enough in to not lose everything.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @08:13AM (#30136884)
If you're gonna deal directly with the forex industry without any safe-guards there will definitely be a bunch of jargon around, have you ever dealt with the insides of forex trading before?

In general, giving someone money does not require intimate knowledge of what's happening behind the scenes, that's true. But the submission is not about a normal transfer, the user is explicitly avoiding the safe-guards in place, and got burned by it. It's no surprise really.

Re:Did I just lose half a million dollars? by kuhewa on Sunday January 30, 2022 @08:26AM (#30136978)
> have you ever dealt with the insides of forex trading before?

Why, is there a way to send currency directly and irrecoverably into a paper shredder on the inside?

Re:Did I just lose half a million dollars? by Rastonbury on Sunday January 30, 2022 @10:11AM (#30137828)
The idea behind 'smart' contracts is to have immutable and decentralized pieces of code on the blockchain to execute transactions, eg. to swap ETH for NFTs or ETH to WETH like in the OP. They have addresses because they can keep a balance, but because they are supposed to be dencentralized no one can move that balance. If it did have a transfer or withdraw function people would have to trust the creator not to suddenly scam everyone.

But yeah the ability to send the directly to the address is stupid. There are no real world and crypto world use cases do it. I think the most glaring thing is that person has 500k in ETH but no idea how smart contract work or how to use the functions...

Re:Did I just lose half a million dollars? by CRConrad on Tuesday February 01, 2022 @05:45PM (#30170660)
> to execute transactions, eg. to swap ETH for NFTs or ETH to WETH like in the OP.

It could apparently only swap from one kind of crypto-"currency" to other stuff.

> But yeah the ability to send the directly to the address is stupid.

Isn't the problem raher the ability to send the wrong "currency" to the address?

If it can only change from one kind to others, then the correct behaviour is obviously to accept only that kind, and reject any others. This is basically an online version of a physical currency-changing ATM, where you feed in dollars to get euros (or other currencies?) in stead. If you feed in euros or pounds or yen by mistake, the ATM should obviously spit it back out. This online version just swallowed the wrong currency. You don't have to know how ATMs actually work internally in order to determine that this is invalid behaviour not only on the user's part, but definitely on the ATM's too. If the ATM can only change from dollars to other currencies, then it should only accept dollars.

Re:Did I just lose half a million dollars? by ClumsyPilot on Sunday January 30, 2022 @09:50AM (#30137655)
If you real with trading, options and swaps without understanding them - yes, very much so
Re:Did I just lose half a million dollars? by PeterisP on Sunday January 30, 2022 @05:44PM (#30142022)
Well no, you can use options and swaps to accidentally "gift" your money to more proficient traders or to market-making institutions or just pay it away in fees, but in all those cases you're giving the money to someone, not shredding it.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @08:28AM (#30136997)
Do you actually understand what happened in this case?

No one sent any currencies into a "shredder", so not sure why you're asking this question?

Re:Did I just lose half a million dollars? by hootbootscoot on Sunday January 30, 2022 @08:59AM (#30137237)
an immutable black hole might as well be a shredder. the OP in the reddit did precisely that. that money is GONE. locked away forever. it has not been transferred to anyone else.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @10:22AM (#30137918)
Indeed, an "immutable black hole" could be described as a shredder, agree. But that's not what that address is. The semi-official "black hole" address for Ethereum is 0x0000000000000000000000000000000000000000 (https://etherscan.io/address/0x00000000000000000000000000000...), currently has $29,461,295.02 worth of ETH in it. Any other (valid) address is just another address on the network.
Re:Did I just lose half a million dollars? by SantalBlush on Sunday January 30, 2022 @12:36PM (#30139157)
"It's not a black hole, because black holes are collapsed stars, which is clearly not what we're talking about."

This is basically the style of argumentation being used here. Frequent equivocation over the terms "valid" and "black hole" to avoid addressing anyone's actual point.

Re:Did I just lose half a million dollars? by kristjansson on Sunday January 30, 2022 @11:00AM (#30138272)
Why do you see a difference between colloquial usage of ‘black hole’ and ‘valid address from which tokens cannot be retrieved’?
Re:Did I just lose half a million dollars? by derbOac on Sunday January 30, 2022 @08:43AM (#30137105)
This kind of argument came to mind when I first read the thread, but then I thought... isn't the whole point of crypto to be decentralized? To avoid these kinds of concentrated power structures?
Re:Did I just lose half a million dollars? by noduerme on Sunday January 30, 2022 @07:18AM (#30136492)
Also, chemistry sets come with a lot of graphic warnings.
Re:Did I just lose half a million dollars? by aniforprez on Sunday January 30, 2022 @08:25AM (#30136964)
Do we need a "hot coffee is hot" warning label on every crypto transaction?

And yes I'm aware the lady in the case suffered and it's terrible. I'm just being facetious

Re:Did I just lose half a million dollars? by IgorPartola on Sunday January 30, 2022 @09:31AM (#30137489)
Oh come on. This is clearly a terrible system design choice and should have never been codified.
Re:Did I just lose half a million dollars? by kuhewa on Sunday January 30, 2022 @08:27AM (#30136991)
If it is ever going to solve a fraction of the societal ills promised, yeah sounds like it will need that warning.
Re:Did I just lose half a million dollars? by nicbou on Sunday January 30, 2022 @01:39PM (#30139780)
I've been paying attention to this whole thing for a few years, and I still can't tell how I could send coins to a friend if I had them.
Re:Did I just lose half a million dollars? by TigeriusKirk on Sunday January 30, 2022 @10:41AM (#30138071)
The thing that gets overlooked here is this guy had to have an above average understanding of all this to even get into a position to make this mistake. Manually sending weth to a contract address is not a process a newbie would even conceive of doing. Or even having weth in the first place.

This guy was pretty far over on the right side of the bell curve when it comes to Ethereum knowledge.

It's still obviously a giant design gotcha that losing money this way is possible. They fact that it happened to a guy who knew probably 95% of the esoterica he needed to know to complete the transaction successfully and still got completely burned is an issue.

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @06:10PM (#30142232)
> The thing that gets overlooked here is this guy had to have an above average understanding of all this to even get into a position to make this mistake

You'd think so, but you'd be surprised.

> This guy was pretty far over on the right side of the bell curve when it comes to Ethereum knowledge.

No, that's not true. Even people at the beginning of the bell curve know that you don't send half a million worth of anything around without verifying first that what you're about to do, is correct. You first do that by reading through everything and double-checking. And after that, you do the thing you want to do, but with 1% of the value or less, and verify/double-check again. After that, you do what you actually wanted to do.

The ecosystem is very new, has bunch of sharp edges everywhere and there is no recourse if you do anything wrong, so going through this process is something you learn very early on.

> They fact that it happened to a guy who knew probably 95% of the esoterica he needed to know to complete the transaction successfully

This is obviously not true, as the person seems to not even have search for "How to convert X to Y" before performing something they know they might not be able to undo.

Re:Did I just lose half a million dollars? by jollybean on Sunday January 30, 2022 @11:45AM (#30138646)
What % of the people that use IBAN, know that there is a checksum, know what a checksum even is, or how to apply it?

Thankfully we have banks to deal with that - and legal framework that can help us undo problems.

"But you can use an exchange with ETH!"

Like banks? Making such networks ostensibly not 'decentralized'?

The entire point of Crypto/Blockchain is that is decentralized and is accessible to everyone.

If it requires that we trust 'quasi-centralized nodes' like CoinBase (i.e. banks) then it mostly defeats the purpose. Just use a bank.

At absolute minimum, the purveyors of such tech should be providing 'off the shelf' free wallet software that solves all of these problems of magical knowledge.

All of these arguments are fading quickly and the people doing this are risking a lot of credibility.

We talk about people wasting their time on AdTech, but at least there is actually some value in AdTech. We are facing an entire generation of people doing 'NoTech'. Let's turn this into something useful.

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @11:52AM (#30138710)
I think you missed that the user went beyond just using something to swap ETH for WETH and instead interacted directly (manually) with the contract, effectively bypassing the safe-guards that are already in place (even without exchanges) to prevent issues.

The user basically guessed that this is how you turn ETH into WETH and vice-versa, without actually reading anything about it.

If the user searched for "How do I turn ETH into WETH?" and read the first few links, they would have avoided this problem. If they made a mistake of entering an invalid address in a wallet for a transfer, the wallet wouldn't allow the transfer in the first place.

> The entire point of Crypto/Blockchain is that is decentralized and is accessible to everyone

Yes, indeed. That also implies that you're responsible enough to have a basic understanding of what you're doing. Or at least recognize that you don't have a basic understanding, and seek to attain one when needed.

Re:Did I just lose half a million dollars? by Adrox on Sunday January 30, 2022 @12:35PM (#30139151)
It was not “manual”. It was using MetaMask, one of the most used wallets and most recomended one!

Its not like going to a shell and putting a random command. It was one of the most used GUIs for crypto!

Re:Did I just lose half a million dollars? by landemva on Sunday January 30, 2022 @04:48PM (#30141471)
MetaMask, and any wallet, lets the user sign transactions. Wallets can't know nor validate contract internals.
Re:Did I just lose half a million dollars? by baobabKoodaa on Sunday January 30, 2022 @08:35PM (#30143423)
They could.
Re:Did I just lose half a million dollars? by jollybean on Sunday January 30, 2022 @12:03PM (#30138823)
It doesn't really matter that 'someone did something they should not'.

People will always press the Magic Red Button without knowing what it does with some, if rare, consistency. That's human nature, ergo, our systems must accommodate.

The fact it's possible to lose $500K whereupon 'nothing can be done about it' is a 'dealbreaker' for this tech.

The truth is, when one goes down the rabbit hole, one discovers that ETH doesn't really solve any problems and creates a bunch of problematic side-effects. When you solve those side-effects you end up with something that looks like a regulated banking system.

There needs to be a new angle/twist or use case that we haven't thought of yet, in order for any of this to make sense. We risk getting into accidents when we drive a car, because the 'upside' of fast travel is worth the risk. There's just no real upside with Crypto yet. NFT was a neat idea, but that's not it either.

Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @12:13PM (#30138910)
> People will always press the Magic Red Button without knowing what it does with some, if rare, consistency. That's human nature, ergo, our systems must accommodate.

Are you also frustrated that you can run `rm -rf --no-preserve-root` on your computer and it's not possible to get back your data unless you had backups since before? Clearly, this is a dealbreaker for UNIX because it allows you to delete your root partition. Why would you ever need that?

> NFT was a neat idea, but that's not it either.

Yeah, no, NFTs were and remain a disgusting idea, but thanks for revealing your opinion on that, makes it easier to understand where the falsehoods in the rest of your message comes from.

Re:Did I just lose half a million dollars? by jollybean on Sunday January 30, 2022 @04:39PM (#30141391)
"makes it easier to understand where the falsehoods in the rest of your message comes from. "

Oh, yes, I'm one of those 'normies' or 'MBA Suits' (!) who can't possibly understand the genius and vision of Crypto and Blockchain.

We see it is a 'Pyramid Scheme Scam' at worst, and completely useless distraction at best, because we're just not enlightened.

You got me.

Re:Did I just lose half a million dollars? by CRConrad on Tuesday February 01, 2022 @06:00PM (#30170847)
> the user went beyond just using something to swap ETH for WETH and instead interacted directly (manually) with the contract

Isn't it the "contract" that is supposed to be the "smart" thing here?

> effectively bypassing the safe-guards that are already in place (even without exchanges) to prevent issues.

YTF aren't these "safe-guards" built into the "contract", if it's supposed to be so "smart"?

Even the most stupid ordinary non-"smart" conversion program has the "smarts" to reject invalid input, not confiscate it.

This whole Crypto/Blockchain business is so obviously bullshit all the way down.

Re:Did I just lose half a million dollars? by glerk on Sunday January 30, 2022 @01:04PM (#30139451)
Cryptocurrencies give you the OPTION to use a trust-less decentralized system. If that’s not your cup of tea, nobody is forcing you to opt-in to this system. Go use a bank, or a centralized exchange, or whatever makes you happy.

> At absolute minimum, the purveyors of such tech should be providing 'off the shelf' free wallet software that solves all of these problems of magical knowledge.

UI is continually improving and is already much better than in the early days. But the “purveyors of this tech” don’t owe you anything. If you’re not satisfied with the current wallet offerings, you can go build your own, or you can simply choose not to use cryptocurrencies.

Re:Did I just lose half a million dollars? by jollybean on Sunday January 30, 2022 @04:43PM (#30141425)
If the 'option' implies all sorts of 'costs' (such as lack of oversight, losing money, no insurance') - then it's a choice rational people will not make.

"But the “purveyors of this tech” don’t owe you anything"

You're right.

And it's why nobody in world uses crypto, blockchain or any of this nonsense for doing anything productive and use it solely for trading magic numbers.

Re:Did I just lose half a million dollars? by wbl on Sunday January 30, 2022 @07:49AM (#30136717)
If this happened at a bank everyone involved would fix it and have a nice laugh the next day.
Re:Did I just lose half a million dollars? by HWR_14 on Sunday January 30, 2022 @09:43AM (#30137586)
If this happened at a bank, you would be told you submitted the wrong form to withdraw foreign currency from your account (closest analog I can think of) and be given the correct form before it even started getting processed.
Re:Did I just lose half a million dollars? by capableweb on Sunday January 30, 2022 @11:02AM (#30138297)
A better analogy would be that you sent the money to a bank account you thought belonged to X, but X can no longer prove that they actually are X, so the bank are not allowing them to withdraw the money anymore. Would the bank still send back the money, even though the recipient was technically correct?
Re:Did I just lose half a million dollars? by Gareth321 on Sunday January 30, 2022 @07:05AM (#30136362)
This is indeed the level of knowledge required for even just transferring ETH to another person/wallet. There are different kinds of ETH, and if you transfer to the wrong kind of wallet, you lose everything.

Despite the protestations of advocates, this kind of thing is a major hurdle to adoption.

Re:Did I just lose half a million dollars? by xtracto on Sunday January 30, 2022 @08:06AM (#30136840)
I'm a cryptocurrencies/blockchain advocate in general but this wETH/BnbEth/sETH/stETH and similar crap is just crazy and stupid.
Re:Did I just lose half a million dollars? by hogrider on Sunday January 30, 2022 @11:14AM (#30138411)
Same. That top reddit comment that crypto is not ready yet is absolutely right. This feels like a small bu2ow er trting to digitalize their whole operation on 1978 micro computers and getting burned for it.
Re:Did I just lose half a million dollars? by t8e56vd4ih on Sunday January 30, 2022 @07:08AM (#30136393)
"Any sufficiently advanced technology is indistinguishable from magic."

but yes, I find myself thinking the same with many things. especially when the disciples seem irritatingly proud of their "knowledge" which actually is just a collection of arbitrary and anti intuitive rules.

Re:Did I just lose half a million dollars? by e12e on Sunday January 30, 2022 @09:47AM (#30137618)
Perhaps it's time to coin (sorry) a new phrase:

"Any sufficiently advanced smart contract system is indistinguishable from Magic the Gathering (tm)."

Re:Did I just lose half a million dollars? by zo1 on Sunday January 30, 2022 @06:55AM (#30136270)
Agreed. Some people are super careful, like myself, when transferring money between personal (normal bank) accounts I always test with a small amount. Even if the bigger amount is like $200. And that's after triple checking the account number before clicking transfer. I can't imagine what I'd be doing with these exotic crypto accounts and smart contracts.
Re:Did I just lose half a million dollars? by sshine on Sunday January 30, 2022 @07:39AM (#30136638)
When I do money transfers on bank accounts, I read the 10 digits 4-5 times. If the person that I'm transfering to is in the room, I ask them to read aloud their account number as I follow.

The fact that you have to get 10 digits right and that a typo can result in sending the money off somewhere unknown, disturbs me a lot. It's amazing how cryptocurrencies mimicked that part about existing digital money to perfection.

Give me a QR code, or wire my wallet up with an address book.

Re:Did I just lose half a million dollars? by axiosgunnar on Sunday January 30, 2022 @08:43AM (#30137102)
Account numbers have checksums.

An „off by one“ typo cannot occur.

Re:Did I just lose half a million dollars? by zo1 on Sunday January 30, 2022 @09:41AM (#30137567)
I wouldn't trust all banks to have such things in their account numbers.

Especially in the tech age where they seem to think they're beyond physical keyboard typos and OCR errors.

Re:Did I just lose half a million dollars? by ciupicri on Sunday January 30, 2022 @10:47AM (#30138143)
What are you talking about? IBAN account numbers have not one, but two digit checksums.
Re:Did I just lose half a million dollars? by zo1 on Sunday January 30, 2022 @12:29PM (#30139077)
I probably don't live in the same part of the world as you. IBAN account numbers are not common here at all.
Re:Did I just lose half a million dollars? by CRConrad on Tuesday February 01, 2022 @06:08PM (#30170967)
That only proves that banks in your part of the world are way behind the state of the art. The one thing it doesn't prove -- I hope you didn't think it does? -- is that Crypto/Blockchain is necessary for international currency transfers (as some deluded poster here tried to argue a week or two ago).
Re:Did I just lose half a million dollars? by hashimotonomora on Sunday January 30, 2022 @08:52AM (#30137189)
Do you know how account numbers work in every bank in every country?
Re:Did I just lose half a million dollars? by cecilpl2 on Sunday January 30, 2022 @10:37AM (#30138032)
In Canada we use email for person-to-person money transfers. I transfer money to my contacts by email address. They then get an email which informs them they have a pending transfer, and allows them to deposit it into their bank account.

You can optionally register your email with the central system for autodeposit.

Re:Did I just lose half a million dollars? by djrogers on Sunday January 30, 2022 @12:35PM (#30139147)
That’s available in most US banks as well, but direct account to account transfer via account number is also possible.
Re:Did I just lose half a million dollars? by ALittleLight on Sunday January 30, 2022 @01:57PM (#30139964)
This is one thing that really confuses me about crypto. Whenever I've worked on a website there is an underlying idea that things need to be simple and intuitive because users aren't going to struggle to figure out how to use your site - they'll just bounce.

It's hard to reconcile my experiences with trying to get users to understand and use relatively simple things with the inscrutable nature of the crypto space. Crypto is overflowing with unwieldy acronyms and punishing rakes to step on. And yet, people are putting massive amounts of money into this?

Re:Did I just lose half a million dollars? by norswap on Sunday January 30, 2022 @11:24AM (#30138486)
That's disingenuous. These are really basic concepts in the space (where space = smart contract blockchains).

If you're going to slush a cool half mil around, you should really have absolutely basic litteracy of how this stuff works -- just how you should have the same litteracy about the banking system if you're going to half a mil there too. Or hire people who do.

Re:Did I just lose half a million dollars? by rco8786 on Sunday January 30, 2022 @09:51AM (#30137662)
Agreed this is all nonsensical
Re:Did I just lose half a million dollars? by RaiausderDose on Sunday January 30, 2022 @06:15AM (#30135950)
I would not really call a "one way only exchange contract" magical knowledge.
Re:Did I just lose half a million dollars? by erikbye on Sunday January 30, 2022 @09:02AM (#30137262)
Exactly. And to the critics in this thread, a thing is not necessarily faulty because you fail to understand it.
Re:Did I just lose half a million dollars? by CRConrad on Tuesday February 01, 2022 @06:14PM (#30171043)
I, OTOH, would call a "one way only exchange contract" that doesn't reject "wrong-way" input but confiscates it... magical bullshit.
Re:Did I just lose half a million dollars? by magicjosh on Sunday January 30, 2022 @11:31AM (#30138537)
> It sounds like those arguments you'd hear between kids in junior high over magic cards or pogs or something.

"Just as trying to think up startup ideas tends to produce bad ones, working on things that could be dismissed as "toys" often produces good ones. When something is described as a toy, that means it has everything an idea needs except being important. It's cool; users love it; it just doesn't matter."

From http://paulgraham.com/startupideas.html