News for hackers. Stuff that matters.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by danielvf on Wednesday February 02, 2022 @10:53PM (#30188396)
This bug was on the Solana blockchain. Solana has built in support for updating code.

Even on Ethereum, with it's mostly immutable contracts/programs, there is a super common pattern of a tiny shim contract that forwards all calls on to another contract that does all the work. By changing a storage variable which changes the contract the shim points to, you can effectively upgrade the code.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by dralley on Wednesday February 02, 2022 @11:13PM (#30188564)
And therein lies my biggest frustration with crypto evangelism. Almost every theoretical benefit that gets trotted out is such a detriment in practice that the ecosystem tosses it aside. While still proclaiming it as a virtue.
Re:In second largest DeFi hack, Blockchain Bridge loses $320... by pshc on Thursday February 03, 2022 @12:01AM (#30188905)
I would wager most contracts deployed these days are immutable. Upgradable contracts are frowned upon in the space, moreso every day.

But given that humans are prone to making mistakes, when code is fresh and unproven, proxies are a practical way to go. Once you've ironed out all issues, you blow the fuse so that the contract can't be changed anymore.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by user-the-name on Thursday February 03, 2022 @05:31AM (#30190812)
> Once you've ironed out all issues

Yeah this is something that famously happens with software development, you just iron out all the issue and then never have to change anything ever again.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by pjc50 on Thursday February 03, 2022 @04:38AM (#30190529)
> can't be changed anymore

.. which means that when an undiscovered vulnerability is found all the investors are guaranteed to lose their money.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by woah on Thursday February 03, 2022 @12:23AM (#30189005)
> the ecosystem tosses it aside

This is false. Many of the most heavily used Ethereum contracts, such as Uniswap, are non-upgradeable.

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by masklinn on Thursday February 03, 2022 @01:17AM (#30189303)
The one to which you can send back the stuff it sent you, and it essentially burns the money?

And that can’t be fixed because it’s immutable?

Re:In second largest DeFi hack, Blockchain Bridge loses $320... by nikisweeting on Thursday February 03, 2022 @01:32AM (#30189391)
Correct, but what they can do is hard fork and encourage users to switch to the new version. Users will vote with their feet and choose the version that benefits them most. In a sense it's still upgradable, but only through direct democracy instead of delegated democracy / oligarchy. (and for the record I don't necessarily think that's a good thing for a financial system, but we'll see how it plays out in the next few years)