News for hackers. Stuff that matters.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by danielvf on Wednesday February 02, 2022 @10:22PM (#30188144)
If anyone wants to see an example of a company that is currently doing well at crypto insurance https://app.nexusmutual.io/cover
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by TylerE on Wednesday February 02, 2022 @10:32PM (#30188229)
Why are they any more trustworthy than your typical crypto company? (i.e. not at all)

They don't have a list of board members/investors or a mailing address anywhere that I can find

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by jbkiv on Wednesday February 02, 2022 @10:57PM (#30188437)
Got it, the trust level is pretty low when you the very basic due diligence.

I think Nexus Lexus is legit. They had to in order to get UK clearance. But I understand that they want to demutualize now and become a DAO. DAO is the gold standard for no corporate oversight.

Fake profiles on Twitter and Linkedin. Thousand of fake followers. Incorporated in banana countries. And if they are incorporated at all. If the plan is a rug pull, then bypass incorporation, of course.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by dralley on Wednesday February 02, 2022 @11:05PM (#30188526)
Even if they were a "normal" company, trust level ought to be low by default by virtue of their name being a fairly obvious ripoff of a well known lawtech and risk analysis company.

https://www.lexisnexis.com/en-us/gateway.page

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by phphphphp on Thursday February 03, 2022 @06:51AM (#30191305)
I know nothing about the company but I do know about UK company law. A UK company is very easy to open, there's no oversight, you declare the truthfulness of your statements and that's it: it takes about 10 minutes, you could have a UK company by the end of today. The directors of the company in question are not British, so even in the worst case scenario where they break the law and are pursued, they can just skip the country and face no real recourse.

There are some opportunities that can be a meaningful demonstration of credibility, like registration with the FCA, but I don't see any evidence of that for this company. I would consider their incorporation (as a cic, not a for-profit company) meaningless in determining if they're credible.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by danielvf on Wednesday February 02, 2022 @10:50PM (#30188374)
From the link on the home page for the "notice of general meeting" for Nexus Mutual Ltd, the directors are:

KARP, Hugh DANILA, Ionela Roxana MELBARDIS, Reinis MUNOZ-MCDONALD, Nicolas THURGOOD, Graeme George

This matches the company and director information registered in the UK since 2017. Company mailing address is here as well:

https://find-and-update.company-information.service.gov.uk/c...

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by robjan on Thursday February 03, 2022 @12:17AM (#30188977)
The office address in that link is just a virtual office.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by vmception on Wednesday February 02, 2022 @10:40PM (#30188290)
because you can get claims approved pretty fast after making cheap policies for specific protocols and transactions. consensus on unexpected behavior of a smart contract is pretty quick. the insurance pool is filled by the risk tolerance of people wanted that form of passive income.

If it doesn’t function as intended then complain about that and launch a competitor.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by tkfu on Wednesday February 02, 2022 @10:57PM (#30188440)
That's a completely nonsensical answer to the question that was asked. It's frigging insurance--the whole damn point of buying insurance is to offload risk.

Insurance where you can't be certain the company will be around (or actually pay out) when the shit hits the fan is completely useless as insurance, and it's either naïve or disingenuous to suggest that the solution to that is to "complain". And suggesting launching a competitor is just an extra special kind of stupid: if you have enough capital to start an insurance company, you're obviously not in the market for buying insurance.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by vmception on Wednesday February 02, 2022 @11:02PM (#30188486)
In this model the protocols are often community funded and there is sentiment for more competitors. Just copy the same model and tweak a small variable.

Its not the same as the highly capitalized opaque insurance company you need to be skeptical about, the analogy from a lived experience almost doesnt work at all. it does have the function of derisking things though.

So it exists, I know it exists, you dont know it exists, I’m not the encyclopedia of the specific nuances of each protocol, so go check it out

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by tkfu on Thursday February 03, 2022 @12:04AM (#30188919)
The basic argument you seem to be making is "This exists, and there is self-evidently a market for it, therefore it must be good. (Or, if it isn't good, tweaking some parameters could make it good.)" That's a bad way to evaluate the risk of something so new, in a market that is so volatile. People get suckered into buying bad insurance all the time, even in highly regulated markets.

But anyway, I went ahead and checked out the white paper of nexus mutual [1], because I was curious. It appears to have a serious amount of hand-waving on one of the most important topics: the risk correlation between offered insurance products. They do reference the correlation matrix, but the only mention of how the value of the matrix is determined is to say that if independence between cells can be assumed, the math is very simple. Doing a quick search through their website and code, it looks like they are indeed just assuming that products aren't correlated, instead of trying to estimate real correlation values. This means that their minimum capital requirements (and thus the implied risk of default) are incorrectly calculated if that assumption is violated--which it certainly is.

This seems to be by design, and baked into the incentive structure of the whole concept. There's just no practical way to crowdsource proper correlation evaluation and adjustment, and the economics stop being remotely competitive if you just guess at correlations and treat it as another risk to be hedged. You can see this later on in the white paper (appendix A), where they point out that the economic viability of the project depends on lowered labour costs because product creation, assessment, and policy issuance are crowdsourced or automated. Their game theory/tokenomics are focused on providing incentives for individual products to price risk accurately, however: they do not propose any mechanism for adjusting or calculating MCR based on correlation risk when new products/coverage are offered. This is further evidence that they're just assuming independence without any real justification, and thus being chronically undercapitalized.

[1] https://nexusmutual.io/assets/docs/nmx_white_paperv2_3.pdf

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by vmception on Thursday February 03, 2022 @12:15AM (#30188965)
It wasn’t an argument, it was acknowledgement. I would consider to both open a policy in defi insurance protocols including Nexus mutual, or consider to provide capital to the insurance pool for passive income or simply trade the associated token. But that’s because all 3 may periodically fit my personal risk profile. This post only acknowledges that they exist and work and are options that require evaluating differently than a traditional insurance company. I don’t care thaat much about how they currently function or your own personal risk tolerance. I’m fine with them blowing up on occasion or permanently, I expect it to happen and for more resilient ones to exist in their place.

You’ll be better off asking around in their community or using the product to see what the current state is, usually they diverge far from the white paper such that analyzing it that was is a waste of energy. Sorry about your dissertation. You can branch the chain onto localhost to prod at it if you don’t want to spend any money.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by throwhauser on Wednesday February 02, 2022 @10:47PM (#30188347)
How many claims have they paid out?
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by vmception on Wednesday February 02, 2022 @10:55PM (#30188415)
I don’t know.

I know of dozens of high profile hacks over the last year that left entire communities scrambling where some members and users had previously opened policies on one of the various insurance protocols and got paid out the same day as the hack. They were often recipients of the recovery path the communities took too.

There is more than just Nexus Mutual. You can ask in their respective communities if they have stats on that, or perhaps run a query on dune analytics to see what actions their associated smart contracts have taken, isolate a claim payout and tell the query to count

What I envision is the insurance choices being shown at the wallet level or opening policies is concatenated in other coverable smart contract transactions.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by danielvf on Wednesday February 02, 2022 @10:57PM (#30188432)
You can see on this page on their site:

https://app.nexusmutual.io/claim-assessment

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by jbkiv on Wednesday February 02, 2022 @10:52PM (#30188391)
Nexus Mtual and others focus on smart contracts on a protocol, rug pulls, and de-pegging risk Our target: consumers buying and selling NFTs and crypto. When we launch I'll scared to death 24/7.