News for hackers. Stuff that matters.
Re:Nomad drained of $150m due to a coding mistake by rapsey on Tuesday August 02, 2022 @10:37AM (#32319051)
Well done and congrats to the hackers. One step closer of ridding the world of web3 nonesense.
Re:Nomad drained of $150m due to a coding mistake by dang on Tuesday August 02, 2022 @03:57PM (#32323525)
Please don't post flamebait to HN. It's not what this site is for, and it destroys what it is for.

https://news.ycombinator.com/newsguidelines.html

Edit: it should be obvious, but this moderation point has zero to do with how any of us feel about web3 or whatever.

Re:Nomad drained of $150m due to a coding mistake by choppaface on Tuesday August 02, 2022 @04:10PM (#32323678)
Couldn’t you send this sort of message privately? The post gained a number of replies and the sentiment that “web3 is trash” is about as commmon today as “McKinsey is trash.” I would advocate HN send warnings in private as, respectfully, public warnings look like flamebait IMO to me.
Re:Nomad drained of $150m due to a coding mistake by dang on Tuesday August 02, 2022 @04:31PM (#32323907)
It's vital that such messages be public. Their most important function is to signal to the community what sorts of comments are/aren't ok here, and indeed that the site is moderated at all.
Re:Nomad drained of $150m due to a coding mistake by eastbayjake on Tuesday August 02, 2022 @04:35PM (#32323963)
> The post gained a number of replies and the sentiment that “web3 is trash” is about as commmon today as “McKinsey is trash.”

Those are both low-value, ad hominem attacks that don't substantively engage with content, and they are both comments that erode the quality of discussion in our community.

Re:Nomad drained of $150m due to a coding mistake by lelandbatey on Tuesday August 02, 2022 @04:22PM (#32323800)
Hacker News does not have a "private message" feature, so there is no way to communicate other than publicly.
Re:Nomad drained of $150m due to a coding mistake by dagw on Tuesday August 02, 2022 @11:12AM (#32319564)
No! We need more "web3 nonsense" like this. This is the closest the internet has felt to the cyberpunk dreams of the 90s. Outlaw Hackers exploiting bugs in automated smart contract to hijack cryptocurrency is the future Gibson promised us.
Re:Nomad drained of $150m due to a coding mistake by wishfish on Tuesday August 02, 2022 @11:25AM (#32319778)
True, but it's funny how all these hijinks seemed so cool in the books. Jacking in while in a grimy Tokyo nightclub as your friend, the assassin with razorblades, watches your back. But in reality, it's just all so pathetic. Sometimes I feel like a cyberpunk fan in 1988 found a monkey's paw. Made a wish that it would all come true. And it did, but in a much more banal & sad way than the fan would have thought possible.
Re:Nomad drained of $150m due to a coding mistake by rchaud on Tuesday August 02, 2022 @12:03PM (#32320447)
Replace the Tokyo nightclub with an air-conditioned military intelligence office in Pyongyang, where crypto is flooding in via ransomware payments and web3 exploits. That's the reality and it would still be quite sensational....as a Tom Clancy novel.
Re:Nomad drained of $150m due to a coding mistake by kelseyfrog on Tuesday August 02, 2022 @12:27PM (#32320796)
That could just as easily be a chapter in Neal Stephenson's Cryptonomicon.
Re:Nomad drained of $150m due to a coding mistake by woodruffw on Tuesday August 02, 2022 @02:54PM (#32322808)
Do you have evidence that North Korea makes up any significant amount of "Web3" exploits?

From my vantage point, it seems to be mostly bored twentysomethings.

Re:Nomad drained of $150m due to a coding mistake by danielvf on Tuesday August 02, 2022 @04:19PM (#32323770)
I don't think this one was North Korea. And yes, most aren't.

North Korean cryptocurrency hacks are a bit distinctive. Rather than finding logical bugs in contracts, they tend to use traditional spearphishing / social eng to get targeted people to run malware which they try to pivot to stealing keys / access credentials. Then after a hack, most crypto hackers try to obfuscate and store their stole coins on chain somewhere. North Korea already has a large and practiced money laundering network, so after a hack the money immediately starts going to hundreds of different places in the real world, perhaps to mules or to faked accounts in Southeast Asia.

Re:Nomad drained of $150m due to a coding mistake by Nitramp on Wednesday August 03, 2022 @07:26AM (#32330242)
Re:Nomad drained of $150m due to a coding mistake by woodruffw on Wednesday August 03, 2022 @11:44AM (#32333268)
Where's the connection? Ransomware is the other side of the equation: using things like bitcoin to launder money. That's substantially different from exploiting cryptocurrencies.
Re:Nomad drained of $150m due to a coding mistake by hilbertseries on Tuesday August 02, 2022 @12:35PM (#32320921)
I remember how disappointing the duos attack on dyn was several years ago. Science fiction had finally come true, peoples fridges and toasters had been turned into weapons. Become part of a bot net and checks notes took down some websites for a couple hours.
Re:Nomad drained of $150m due to a coding mistake by AceJohnny2 on Tuesday August 02, 2022 @01:44PM (#32321960)
> And it did, but in a much more banal & sad way

"The future is already here, just unevenly distributed" and boring

Re:Nomad drained of $150m due to a coding mistake by lostmsu on Wednesday August 03, 2022 @10:18AM (#32332014)
Matches my view of cyberpunk as comic books of sci-fi.
Re:Nomad drained of $150m due to a coding mistake by qbasic_forever on Tuesday August 02, 2022 @03:55PM (#32323491)
You do realize that much of the 'cyberpunk dream' science fiction of the 90's was actually harshly critical satire and dystopia of what the world would look like when technocrats and technology rule people, right? Like you realize William Gibson books and such aren't just cyberspace opera/Stars Wars in VR... it's showing the real suffering that was possible when you blindly trust technology to rule society. Gibson is honestly a bit of a luddite in his mistrust of technology.
Re:Nomad drained of $150m due to a coding mistake by fsckboy on Tuesday August 02, 2022 @06:58PM (#32325375)
I don't agree that cyberpunk was critical or satirical of technology, any more than film noir detective stories are critical satires of telephones, guns, and automobiles or the gritty parts of town; that's just a setting and some props, they're stories of human nature.
Re:Nomad drained of $150m due to a coding mistake by lokar on Tuesday August 02, 2022 @04:31PM (#32323905)
This has long been obvious to everyone except the tech crowd who worship it as an ideal. Ironic.
Re:Nomad drained of $150m due to a coding mistake by shreyshnaccount on Tuesday August 02, 2022 @12:42PM (#32321018)
the real fun of "cyberpunk" is supposed to be open source hardware, modular phones, cyber decks, laptops with six folding displays, ipads with gpio pins and its not a step closer to reality. sad. :( instead we get this web3 nonsense. hate it.
Re:Nomad drained of $150m due to a coding mistake by outworlder on Tuesday August 02, 2022 @03:02PM (#32322894)
> open source hardware

Is it really supposed to be open-source? A common cyberpunk trope is that mega corporate conglomerates own verything. Cyberdecks are modified and reverse-engineered, yes. But generally come from a mega corp.

Re:Nomad drained of $150m due to a coding mistake by dagw on Tuesday August 02, 2022 @05:23PM (#32324458)
modular phones, cyber decks, laptops with six folding displays, ipads with gpio pins

We have all that, although most of it from smaller Chines manufacturers. More than that we do have truly open source hardware, you can download schematics for almost anything, modify and design your own chips and circuits based on open designs, dream up your own hardware, and if know the right people in Shenzhen you can email it all to them and they'll build it for you.

The reason so few people take advantage of any of this is that it didn't turn out to be that useful.

Re:Nomad drained of $150m due to a coding mistake by arpa on Wednesday August 03, 2022 @02:14AM (#32328221)
And this is why we live in a boring, most stupid dystopia with bullshit tech. People exchange the walk in part in the war for a lead role in a cage, and it's rarely a lead role, too. I guess that's what you get if your paperclip optimizer is geared towards manufacturing consumption. It's just very sad to see all the potential just ... wasted.
Re:Nomad drained of $150m due to a coding mistake by dagw on Wednesday August 03, 2022 @03:29AM (#32328678)
While you're not entirely wrong, have you seen the stuff people are building with even simple off the shelf components like Arduino's and Raspberry PIs? Even FPGAs are within the price range of individuals, and small companies can easily go full ASIC for a few 100k$ if you want to get really custom. There is nothing stopping you diving head first into this world and designing and building (or having built) basically any hardware you want.
Re:Nomad drained of $150m due to a coding mistake by arpa on Wednesday August 03, 2022 @06:37AM (#32329919)
yeah, you're not wrong either. We have a lot of potential and opportunity which is then wasted on twitter and NFTs and what have you.
Re:Nomad drained of $150m due to a coding mistake by shreyshnaccount on Tuesday August 02, 2022 @10:38PM (#32327018)
that, and also that this is all incredibly low level stuff. there's not hot swappable modules, but base components. also its very expensive and only makes sense in bulk to get them from China.
Re:Nomad drained of $150m due to a coding mistake by rchaud on Tuesday August 02, 2022 @11:59AM (#32320381)
The numbers talked about in crypto exploits are in the hundreds of millions, if not billions. I would have thoughts the 'cyberpunks' chasing these would be completely outnumbered by state-backed information warfare groups.
Re:Nomad drained of $150m due to a coding mistake by dagw on Tuesday August 02, 2022 @12:07PM (#32320507)
I would have thoughts the 'cyberpunks' chasing these would be completely outnumbered by state-backed information warfare groups.

Maybe they are... Perhaps this is the new way the CIA is financing their off the books activities.

Re:Nomad drained of $150m due to a coding mistake by atlasunshrugged on Tuesday August 02, 2022 @12:19PM (#32320678)
It's been the way the N. Koreans have been for a while! https://www.nytimes.com/2022/06/30/business/north-korea-cryp...
Re:Nomad drained of $150m due to a coding mistake by ufmace on Tuesday August 02, 2022 @04:21PM (#32323793)
You know, it'd be really funny if the CIA had figured out a way to hack crypto etc to make extra money to finance black ops and had successfully managed to blame it all on North Korea.
Re:Nomad drained of $150m due to a coding mistake by radicaldreamer on Tuesday August 02, 2022 @01:52PM (#32322059)
People are losing their life savings and families are being set back a decade or more, but the aesthetic sure is cool!
Re:Nomad drained of $150m due to a coding mistake by arpa on Wednesday August 03, 2022 @02:15AM (#32328231)
Something something stupid games something something stupid prizes.
Re:Nomad drained of $150m due to a coding mistake by shreyshnaccount on Wednesday August 03, 2022 @02:37AM (#32328362)
that song sounds good tho. but the lyrics are sad. huh, an apt comparision in more than one way
Re:Nomad drained of $150m due to a coding mistake by jollybean on Tuesday August 02, 2022 @08:10PM (#32326009)
That's a great point actually.

So long as people aren't running around with too much bad money.

Re:Nomad drained of $150m due to a coding mistake by powerhour on Tuesday August 02, 2022 @11:32AM (#32319907)
I don't remember Gibson but I wonder if we can get to the point that outlaw hackers limit damage to the wealthy and send "refunds" to the exploited. That would be worth celebrating.
Re:Nomad drained of $150m due to a coding mistake by rchaud on Tuesday August 02, 2022 @12:14PM (#32320620)
That would be the part at which these books go from sci-fi to straight up fantasy.
Re:Nomad drained of $150m due to a coding mistake by Ekaros on Tuesday August 02, 2022 @01:17PM (#32321567)
I would say that anyone who have enough time and money to investing in crypto is by definition wealthy.
Re:Nomad drained of $150m due to a coding mistake by jeffgreco on Tuesday August 02, 2022 @01:43PM (#32321945)
I wish that were true. The Celsius and Voyager fallout has shown otherwise:

https://blog.mollywhite.net/celsius-letters/ https://blog.mollywhite.net/voyager-letters/

Re:Nomad drained of $150m due to a coding mistake by Ekaros on Tuesday August 02, 2022 @01:46PM (#32321990)
Only read voyager letters, but those sums listed point towards people being very wealthy.

I could see point if we were talking of hundreds, but we are talking of sums of over hundred of thousand. Which to me is very wealthy on global scale at least.

Re:Nomad drained of $150m due to a coding mistake by wiredfool on Tuesday August 02, 2022 @03:15PM (#32323045)
My kitchen contractor was in crypto -- when we were talking a few months ago he was down 20% but waiting for it to come back. That was pre meltdown.

It's not just the wealthy, it's the cab driver giving crypto tips now.

Re:Nomad drained of $150m due to a coding mistake by drc500free on Tuesday August 02, 2022 @04:07PM (#32323642)
I mean, sure, in the sense that a janitor in the US is wealthy when considered globally.
Re:Nomad drained of $150m due to a coding mistake by dagw on Tuesday August 02, 2022 @05:51PM (#32324731)
is by definition wealthy.

Or at least they where before investing in crypto...

Re:Nomad drained of $150m due to a coding mistake by cynusx on Tuesday August 02, 2022 @12:05PM (#32320490)
Like communism, that idealism fails on the part where the one stealing a lot of money (or appropriating it in communism for the greater good) has to actually give it back to somebody that is not himself
Re:Nomad drained of $150m due to a coding mistake by kyruzic on Tuesday August 02, 2022 @11:57AM (#32320359)
That's like saying each train robbery during the settlement of the west was getting us one step closer to ending the settlement.

If anything these heists prove interest in web3 remains high.

Re:Nomad drained of $150m due to a coding mistake by colechristensen on Tuesday August 02, 2022 @12:01PM (#32320412)
This is about like saying the Hindenburg proved the popularity of zeppelins.
Re:Nomad drained of $150m due to a coding mistake by 676234e117 on Tuesday August 02, 2022 @12:19PM (#32320668)
Interesting analogy. Is this exploit a Hindenburg or a steam train wreck?

It is probably both. The model of allowing governance updates from a contract owner on a bridge or rollup is not sustainable and will have to change to mitigate these kinds of risks. Whether that means crypto networks as a whole will inevitably be replaced by a central banking system is harder to agree with.

Re:Nomad drained of $150m due to a coding mistake by colechristensen on Tuesday August 02, 2022 @12:28PM (#32320819)
Crypto for banking is... mildly interesting. Not very many people have this mindset, more should.

It's being sold as revolutionary, literally, being able to overthrow $x in power or to the more susceptible as a way for everyone to get rich.

So people who believe in it think it's some grand revolution of freedom, and people against it just see it as scammers exploiting the foolish.

What it actually is going to be is boring. Regulated like the rest of finance, centralized like the rest of finance, but with a few new features which will end up not revolutionary but "oh I guess that's nice". It will also come with weaknesses that older centralized institutions don't have that will seem ridiculous at times.

It should be about as exciting as a new programming language for bankers. Like sure if you're a banking programmer you might think it's cool, but not the kind of thing that'll get superbowl ads or the topic of your uncle joe's podcast.

Snarky comparisons to the Hindenburg aside, I really think things like this disaster in the long line of disasters that won't end is just another blow to the excitement of crypto which won't disappear completely or dominate but become a mundane method for the exchange of value which to the end user is only slightly different than the old ways.

Re:Nomad drained of $150m due to a coding mistake by 676234e117 on Tuesday August 02, 2022 @12:43PM (#32321029)
If you look beyond the most vocal proponents you will see a range of opinions.

I do think it will, over the next 10-20 years, completely revolutionize how we think about digital assets and digital currency. For the average user it might not be any different than paying with Apple Pay. But there will be other novel applications and companies that emerge from this space much like what occurred in the years after the dot com boom.

Re:Nomad drained of $150m due to a coding mistake by colechristensen on Tuesday August 02, 2022 @04:42PM (#32324039)
I really doubt crypto will have anything like the impact of the rise of the Internet in the 90s.

There hasn't yet been a killer application besides money laundering and speculation bubbles. It's been long enough and there has been nothing but toy applications outside of people specifically trying to evade laws in various jurisdictions.

The actual applications are just going to be boring.

Holding on to crypto personally for actually paying for things is awful, and worse than cash. Not only can someone take it from me with violence, they can also take it from me because of inevitable software bugs. If there's a centralized account with an institution, it isn't at all different than an account with a bank with dollars. And it becomes easier to see my entire spending history for anybody that sells me something unless I actively launder my money.

Re:Nomad drained of $150m due to a coding mistake by 676234e117 on Tuesday August 02, 2022 @06:53PM (#32325323)
It may never meet the impact of the web but held to that standard, maybe no technology ever will.

The killer application is Ethereum and the ideas it has spawned, including new global financial instruments like stablecoins, decentralized exchanges, NFTs.. and cryptography like zk-STARKs and MPC.

With PoS and privacy enabled rollups this technology can certainly disrupt and compete with today’s popular payment processors in the next few years.

But yes, the most successful consumer applications will probably be boring, like PayPal or Apple or Stripe adding blockchain based mechanisms under the hood.

Re:Nomad drained of $150m due to a coding mistake by Yizahi on Wednesday August 03, 2022 @04:43AM (#32329194)
- stablecoins - this one is thousands years old, because it's essentially IOUs. Nothing new or special, excepts of course Giancarlo's token printer :) .

- DEX - sure, new thing. We all see how it works out. This is what, 5th DEX exploit just this year? And I'm talking only about big exploits.

- NFT - literally useless junk build on lies and insane lies. I dare you to name even one area which NFT can improve.

- cryptography - maybe, I don't know. Though I suspect that those developments can be simply self serving for token industry and not really transferable to other industries.

- BigCorp adding blockchain - why though? What would they get by introducing a private, inefficient, slow and not user friendly (users = employees of those corps) data storage? Private BC completely defeats all its small promises about decentralisation or privacy etc.

Re:Nomad drained of $150m due to a coding mistake by 676234e117 on Wednesday August 03, 2022 @05:20AM (#32329446)
- ERC20 stablecoins are not a paper IOU but ok.

- all these protocols are beta software, less than a few years old. Uniswap as one of the oldest is probably also the most secure.

- NFT: ability to hold custody over a digital record without relying on a single private company's servers to uphold that. But I expect you will move the goalposts...

- Cryptography: take a minute to look at developments in ZKP, MPC, new signature schemes. Many uses outside of pure blockchain[1].

- BigCorp: because they can extract value from it. If 5% of Shopify or PayPal users want to use crypto payments, the company can support that method and charge rent on it. Or they can ignore crypto, and let another company absorb the potential revenue. But because they like profit, this is why we see Shopify, Stripe, and PayPal all integrating crypto currency.

[1] https://blog.cloudflare.com/introducing-zero-knowledge-proof...

Re:Nomad drained of $150m due to a coding mistake by Yizahi on Wednesday August 03, 2022 @08:13AM (#32330663)
Accepting external cryptotokens like BTC or ETH is one thing, but it is totally not a "like PayPal or Apple or Stripe adding blockchain based mechanisms under the hood" end quote. Sure, assuming external ecosystem is at least somehow working on it's own, then payment processors can integrate with it. But using blockchain tech internally is dumb and pointless. (unless we are talking about Git, but tokenbros try to pretend that is not a blockchain anyway)

I don't see how digital IOUs is anything novel or invented by tokenbros. Paper or digital, it's the same this essentially.

NFTs... How EXACTLY does NFT "holds custody" of anything? Please describe what do you mean by that.

Re:Nomad drained of $150m due to a coding mistake by 676234e117 on Wednesday August 03, 2022 @10:25AM (#32332123)
If you are asking "how does NFT hold custody" of a digital record then I assume you have never looked at how NFTs work at a technical level. If you know code, you can look at the ERC721 spec yourself.

A practical example of an application on top of this is namespace aliases that are held non custodially by the users through an ERC721 contract - see ENS. The user's private key gives them access to a record within a smart contract, allowing them to update some state or transfer ownership of the data object.

Re:Nomad drained of $150m due to a coding mistake by Yizahi on Wednesday August 03, 2022 @11:15AM (#32332884)
Haha, you got me :) . DNS records is actually a valid case. I have no idea if it is also a "better" case, but lets assume so for the sake of argument.

I will clarify my question better now, hopefully. How EXACTLY does NFT "hold custody" of anything not living fully on on the blockchain already? So any physical object, or any digital object outside of cryptotokens and DNS records on the blockchain.

Re:Nomad drained of $150m due to a coding mistake by 676234e117 on Wednesday August 03, 2022 @11:43AM (#32333250)
> How EXACTLY does NFT "hold custody" of anything not living fully on on the blockchain already?

I am not suggesting it does. I am suggesting it allows you to hold ownership of an asset on the blockchain. At this point it means ENS, art, collectibles, loans, stablecoin positions, user accounts, and other assets that can be defined digitally and on chain.

At some point in the future, property laws might change to recognize crypto tokens as their own asset class, which would make possible things like having some claim of ownership over a gold bar based on holding a NFT. Many investors today hold gold in their portfolio without it physically being transferred to them. Instead, ownership of the assets is recorded on some ledger, which could be a public ledger.

Mattereum is working in this space, trying to tokenize gold bullion, wine[1], and recently real estate[2] with legal warranty, but I would not put much stock in this idea until there is more clarity from lawmakers.

[1] https://www.businesswire.com/news/home/20220624005079/en/IG-...

[2] https://www.businesswire.com/news/home/20220731005030/en/Mat...

Re:Nomad drained of $150m due to a coding mistake by Yizahi on Wednesday August 03, 2022 @12:17PM (#32333662)
- ENS - yes

- art - no

- collectibles - no

- loans - as in "loan your NFTs"? Technically yes, but since NFTs are worthless bullshit it is kinda pointless.

- stablecoins positions - please elaborate, never heard this idea before

- use accounts - no

- other on chain assets - yes

- other off chain assets - no

tl;dr - NFTs themselves lack any ability to provide proof of ownership, transfer IP rights, or hold custody simply because it is technically impossible. Any cadaver constructs which allows this are inevitably an additional centralised systems which do all the actual work and actually store digital data. NFTs are fifth leg in a horse - pointless and useless. (DNS records alone of course don't justify NFT existence)

Re:Nomad drained of $150m due to a coding mistake by 676234e117 on Wednesday August 03, 2022 @12:24PM (#32333750)
Have you ever purchased art or collectibles? It does not entitle you to IP rights or transfer any IP rights to you.

Loans and DeFi - see Uniswap issuing ERC721 Liquidity Pool tokens.

User accounts - exact same mechanism as ENS, but different namespace specific to a protocol. See Lens protocol for example.

Re:Nomad drained of $150m due to a coding mistake by shreyshnaccount on Wednesday August 03, 2022 @02:50AM (#32328445)
what i dont get is that how can the people who want blockchain adoption not see that their decentralised currency is no good if its in-gates are controlled by a few very centralised companies?
Re:Nomad drained of $150m due to a coding mistake by 676234e117 on Wednesday August 03, 2022 @04:38AM (#32329149)
In the current electronic fiat system, a few companies control both the gates and the network. Crypto at the moment decentralizes the control of the network, which is already a step forward.

Crypto can also be used to decentralize control of the gates, such as allowing goods services and taxes to be paid in USDC and DAI, so that there is less need to use a CEX. But there are regulatory and technical barriers that prevent this from happening right now. The people who want blockchain adoption ideally would like to see those barriers to be overcome.

Re:Nomad drained of $150m due to a coding mistake by shreyshnaccount on Wednesday August 03, 2022 @02:44AM (#32328397)
except what stops apple and google from building basically the same features and also having full control over them? and you bet that people would rather use apple <whatever> than shady crypto scam <whatever> if they really want to. the takeaway is that crypto is going to change practically nothing and produces nothing of value anyway.
Re:Nomad drained of $150m due to a coding mistake by 676234e117 on Wednesday August 03, 2022 @03:44AM (#32328770)
Facebook already tried this, it was called Libra.
Re:Nomad drained of $150m due to a coding mistake by shreyshnaccount on Wednesday August 03, 2022 @05:39AM (#32329559)
except facebook doesn't already have something like gpay or apple pay that's widely used to integrate it with...
Re:Nomad drained of $150m due to a coding mistake by 676234e117 on Wednesday August 03, 2022 @05:42AM (#32329576)
Nothing stops tech companies from building crypto wallets or services that hold custody over users funds, a lot of them are already doing that. Building a new blockchain where they fully control the network and its features is harder.
Re:Nomad drained of $150m due to a coding mistake by shreyshnaccount on Wednesday August 03, 2022 @08:04AM (#32330580)
look at atm cards. thaeres like 4 major players globally, controlling everything. I'm not talking about big tech building crypto wallets, I'm talking about them building features similar to what blockchains can do- fake DAOs, fake NFTs etc. the point I'm trying to make is that the end result of all these features doesn't inherently need a blockchain if a major player wants to build them
Re:Nomad drained of $150m due to a coding mistake by rmbyrro on Tuesday August 02, 2022 @01:11PM (#32321477)
If you don't like banks and someone robs a bank, do you celebrate the robber?
Re:Nomad drained of $150m due to a coding mistake by rideontime on Tuesday August 02, 2022 @01:28PM (#32321735)
Yes, I do.
Re:Nomad drained of $150m due to a coding mistake by rmbyrro on Tuesday August 02, 2022 @07:33PM (#32325675)
Interesting. So, if someone doesn't like you, a robber goes into your home, threatening you and your family, and this person celebrates in your face, you'd be O.K. with it, right?
Re:Nomad drained of $150m due to a coding mistake by rideontime on Wednesday August 03, 2022 @11:35AM (#32333155)
No, I don't see how that follows. The person who doesn't like me might be ok with it, though.
Re:Nomad drained of $150m due to a coding mistake by rightbyte on Tuesday August 02, 2022 @02:17PM (#32322382)
Armed robbery too? Or are we talking unarmed thief digging a tunnel to the vault?
Re:Nomad drained of $150m due to a coding mistake by Kiro on Tuesday August 02, 2022 @10:58AM (#32319372)
Web3 is all about these heists. That's what makes it fun and interesting. We're living the cyberpunk dream.
Re:Nomad drained of $150m due to a coding mistake by wollsmoth on Tuesday August 02, 2022 @12:05PM (#32320487)
I do really enjoy reading about these heists and it does seem like a lot of fun.
[dead]
Re:Nomad drained of $150m due to a coding mistake by dang on Tuesday August 02, 2022 @03:58PM (#32323532)
Please don't respond to a bad comment by breaking the site guidelines yourself. It only makes things worse.

Especially please don't cross into personal attack. We ban accounts that do that.

https://news.ycombinator.com/newsguidelines.html

Edit: since you've actually been doing that a whole bunch recently, I've banned the account. Can you please not create accounts to break HN's rules with?

Re:Nomad drained of $150m due to a coding mistake by Test0129 on Tuesday August 02, 2022 @10:52AM (#32319276)
There is a reason technology that requires high levels of stability is mired in layers of approval, review, regulation, etc. It doesn't change much if at all once it works, because the probability of introducing a failure mode is so high with software.

There's a point where this level of of negligence should rise to criminal liability, no different than if someone wrote code for a new boeing that was so bad it moves beyond incompetence.

We are at this point, and crypto companies need to be held criminally liable for these hacks. If not at least, should be required to carry insurance and pass stringent security audits no different than other high value systems. This is pathetic, and it's not the first time, second time, or third time it happens. I do hope crypto dies. It's been co-opted by grifters and thieves, and even when it's not, grifters and thieves end up stealing the money anyway through hacks like this. Things like this could be somewhat remedied by teaching people to refuse to deal with coins that do not post several independently verifiable third party security audits but alas people don't care anyway.

Re:Nomad drained of $150m due to a coding mistake by endisneigh on Tuesday August 02, 2022 @10:47AM (#32319201)
This is terrible obviously, but if code is law and someone writes bad code and exploits that is it “illegal”?

The entire basis of even having judges, courts, etc is an acknowledgment that the “code” is imperfect and certain circumstances require human intervention.

Going without that is, well… YMMV.

Re:Nomad drained of $150m due to a coding mistake by harambae on Wednesday August 03, 2022 @01:25PM (#32334536)
I honestly wondered the same thing during the VW emissions scandal.

The requirement was that diesel emissions were at a certain level under those exact conditions... And they were OK under those exact exact conditions.

(Anyway it turned out there was a specific carve out for cheater devices and they did get in trouble)

Re:Nomad drained of $150m due to a coding mistake by bitxbitxbitcoin on Tuesday August 02, 2022 @11:24AM (#32319747)
Do people go to jail for writing bad laws?
Re:Nomad drained of $150m due to a coding mistake by Fargoan on Tuesday August 02, 2022 @10:49AM (#32319227)
Code is law is just a meme
Re:Nomad drained of $150m due to a coding mistake by RyanCavanaugh on Tuesday August 02, 2022 @11:33AM (#32319927)
If regular law is the ultimate arbiter of the correct location of funds in this system, then we don't need this complex network of energy-hungry computers constantly double-checking each others' work to make a financial system. We can just use regular computers, like before.
Re:Nomad drained of $150m due to a coding mistake by Fargoan on Tuesday August 02, 2022 @12:24PM (#32320754)
We don't need the web because we can go back to BBSs
Re:Nomad drained of $150m due to a coding mistake by misnome on Tuesday August 02, 2022 @10:55AM (#32319316)
Isn't it a consequence? If the entire foundation of your system is irreversibility and finality, then doesn't it effective becomes true? (unless you are big enough to force a network-wide rollback...).
Re:Nomad drained of $150m due to a coding mistake by cinntaile on Tuesday August 02, 2022 @10:57AM (#32319350)
If you ignore the fact that the actual law might have something to say about this, then sure.
Re:Nomad drained of $150m due to a coding mistake by ghaff on Tuesday August 02, 2022 @11:11AM (#32319551)
But that's exactly what the decentralized crowd is arguing. You encode transactions and no centralized authority (e.g. a country's judicial system backed by people with guns) can override it. A natural consequence is that no one can override a mistake either.

Legal contracts in the physical world can be poorly drafted as well. But courts don't usually allow ludicrous results arising from honest mistakes.

Re:Nomad drained of $150m due to a coding mistake by cinntaile on Tuesday August 02, 2022 @11:15AM (#32319617)
The law doesn't care if I argue it doesn't apply to me.
Re:Nomad drained of $150m due to a coding mistake by dylan604 on Tuesday August 02, 2022 @11:21AM (#32319701)
Code is law only if you are an NPC. If you are a normal user, code is just rules that are potentially breakable
Re:Nomad drained of $150m due to a coding mistake by Night_Thastus on Tuesday August 02, 2022 @10:53AM (#32319285)
I have no sympathy for the end of a speculative trade engine that's been almost exclusively used to scam people. Watch the "Line Goes Up" video, it explains it very well. It's not perfect, but provides plenty of background on crypto in general. (Despite the title)
Re:Nomad drained of $150m due to a coding mistake by simonh on Tuesday August 02, 2022 @10:54AM (#32319314)
It's horrible technology, born from deeply misguided ideals that will hurt and is hurting a lot of people. I'm not going to celebrate it's repeated, persistent failures but I'm not going to deplore them either.
Re:Nomad drained of $150m due to a coding mistake by kstrauser on Tuesday August 02, 2022 @10:50AM (#32319233)
Was this actually theft? The smart contract basically said “ask and you shall receive”.

I’m trying to think of a banking analogy. Maybe their website has a page that says “enter your checking account number to get $1,000”, but the web service had the authorization code commented out. If someone discovers that and tells their friends, have they stolen from the bank?

Note that I’m thinking of “theft” and “stealing” from a legal point of view. The moral angle may be very different.

Re:Nomad drained of $150m due to a coding mistake by misnome on Tuesday August 02, 2022 @10:52AM (#32319283)
Yes, I imagine that would be counted as stealing, if it wasn't intended.

However, if the bank had spent large amounts of time absolutely promising irreversible transactions, and publicly opened itself to attackers, then - no, that's just an intended operation of the system.

Re:Nomad drained of $150m due to a coding mistake by johnbellone on Tuesday August 02, 2022 @10:54AM (#32319311)
This is akin to going to an ATM and finding a bug that lets you withdraw money out using the information from a receipt that someone threw out in the trash bin. It is definitely illegal.
Re:Nomad drained of $150m due to a coding mistake by mathattack on Tuesday August 02, 2022 @10:55AM (#32319324)
If you find a way to get the ATM to spit out $100K to you by mistake, legally you have to pay it back. Same if it’s the bank’s error.
Re:Nomad drained of $150m due to a coding mistake by googlryas on Tuesday August 02, 2022 @11:12AM (#32319566)
Sure, but banks and ATMs have never declared that code is law
Re:Nomad drained of $150m due to a coding mistake by Fargoan on Tuesday August 02, 2022 @12:09PM (#32320549)
Has Nomad ever said "code is law"? I really doubt they did.
Re:Nomad drained of $150m due to a coding mistake by badpun on Tuesday August 02, 2022 @10:55AM (#32319329)
I'm not sure if it's theft but they most certainly have to give the money back. It's just an honest mistake, an equivalent to accidentally dropping a wallet full of cash on the street.
Re:Nomad drained of $150m due to a coding mistake by tgv on Tuesday August 02, 2022 @11:01AM (#32319403)
But that wallet has a signed, notarized affidavit that says "finders keepers".
Re:Nomad drained of $150m due to a coding mistake by chrismorgan on Tuesday August 02, 2022 @11:10AM (#32319537)
But there’s a fair chance that the courts will eventually declare this style of affidavit invalid, being trumped by some law or other.
Re:Nomad drained of $150m due to a coding mistake by doix on Tuesday August 02, 2022 @11:43AM (#32320111)
But if you allow the courts to dictate which crypto transactions are legal/illegal and to undo illegal ones, what's the point of all the decentralisation? You can just use the existing systems.

Which country's laws apply? What if one country considers the Ethereum contract binding, but the other doesn't?

It feels like having your cake and eating it too. I met lots of crypto bros, they all talk about how they use it so they can be immune to government censorship/intervention etc. They gloat about using crypto to avoid taxes and laws.

Relying on the same institutions that you are trying to get away from to overcome flaws in your framework seems entirely hypocritical to me.

Re:Nomad drained of $150m due to a coding mistake by chrismorgan on Tuesday August 02, 2022 @12:47PM (#32321091)
And therein do you see the almost inevitable doom of the dream of decentralised cryptocurrency, because it’s never going to be able to stand up against the power of governments once they decide they don’t like it and have no vested interest in it surviving. All of this stuff, even up to Bitcoin, is only still around at the sufferance of governments that have not yet decided to clearly make it illegal. Most are currently preferring to regulate it (which does tend to undermine the principles of full decentralisation, as you rightly observe), but a few decide to cut it out like a gangrenous parasite that’s enjoying mixing metaphors too much, and others may at almost any time. Already cryptocurrencies flout things like copyright and privacy law, for they have made it fundamentally impossible to comply with various plausible court orders. And “we have designed it so that it is not possible for us to comply” does not impress courts.

And in your musings about which countries’ laws—therein also do you see the perennial mutterings of discontent at international policy, and globalisation shambling towards collapse. It may be averted. It may not.

Re:Nomad drained of $150m due to a coding mistake by powerhour on Tuesday August 02, 2022 @11:34AM (#32319948)
Unfortunately they won't be able to do much about it, besides jail someone (who may in fact be unable to make the victims whole).
Re:Nomad drained of $150m due to a coding mistake by chrismorgan on Tuesday August 02, 2022 @12:57PM (#32321247)
When the executives of cryptocurrency firms start getting jailed for contempt of court (when they fail to comply with a legitimate court order), the industry will collapse, which will take the value of cryptocurrency with it, which will return cryptocurrency to niche status, even if the governments in question don’t just decide to make it illegal.

This may not be the way things unfold, but it’s legally completely plausible.

Re:Nomad drained of $150m due to a coding mistake by oneoff786 on Tuesday August 02, 2022 @11:06AM (#32319476)
It’s like the story of the three little pigs except they just keep trying the straw houses and blaming the wolves
Re:Nomad drained of $150m due to a coding mistake by doix on Tuesday August 02, 2022 @10:51AM (#32319262)
Is it theft? If you go by the whole "code is law" (is that still a popular catch phrase? I don't keep up with crypto much anymore), then this is not theft. The contract let this happen, so it's legal.

Edit: heh, I see a lot of HN had the exact same thought process and we all commented at the same time. I'll leave this up anyway.

Re:Nomad drained of $150m due to a coding mistake by mach5 on Tuesday August 02, 2022 @10:51AM (#32319256)
to be fair it's really funny
Re:Nomad drained of $150m due to a coding mistake by Jerrrry on Tuesday August 02, 2022 @10:46AM (#32319191)
Non Sequitur.

You can do both logically.

You are a horrible convincer.

Re:Nomad drained of $150m due to a coding mistake by upupandup on Tuesday August 02, 2022 @11:04AM (#32319434)
But what about ppl who are trying to get rich off the downfall of others savings? This is web3, crypto
Re:Nomad drained of $150m due to a coding mistake by crest on Tuesday August 02, 2022 @11:26AM (#32319796)
Oh cry me a river. This is criminals applying the codified "law" against each-other for their temporary enrichment and the entertainment of the spectators.
Re:Nomad drained of $150m due to a coding mistake by doopy1 on Tuesday August 02, 2022 @10:46AM (#32319190)
Welcome to HN, where crypto is the devil and must be eradicated at all costs. Anyone who thinks otherwise here is either perceived to be an idiot or a grifter.
Re:Nomad drained of $150m due to a coding mistake by rjbwork on Tuesday August 02, 2022 @11:07AM (#32319489)
It should, perhaps, tell you something that a community with one of the most highly concentrated populations of technically literate people on the internet are so vehemently against a technology.

Crypto is just a paperclip maximizer for silicon and electrons that does what traditional companies have been doing for at least 60 years. Only 100000x less efficiently.

Re:Nomad drained of $150m due to a coding mistake by sneak on Tuesday August 02, 2022 @11:11AM (#32319548)
This community is nowhere near consensus on this matter. A small minority of loud naysayers is.
Re:Nomad drained of $150m due to a coding mistake by JumpCrisscross on Tuesday August 02, 2022 @11:15AM (#32319610)
> This community is nowhere near consensus on this matter. A small minority of loud naysayers is

There's an information bubble. It's not the crypto skeptics. There's a reason when governments around the world have moved to ban crypto there's been little to no popular resistance beyond angry 4channers.

Re:Nomad drained of $150m due to a coding mistake by sneak on Tuesday August 02, 2022 @11:26AM (#32319793)
Substantually more governments have invested time, money, and regulatory effort into the crypto ecosystem than have banned it.

The facts don't support the narrative to which you seem to be attached.

a16z is a large investor in the space and proponent, as well as several other prominent tech investment firms. Are they angry 4channers?

It's ok to be personally against it, but please don't misrepresent the facts.

Re:Nomad drained of $150m due to a coding mistake by JumpCrisscross on Tuesday August 02, 2022 @11:39AM (#32320022)
> more governments have invested time, money, and regulatory effort into the crypto ecosystem than have banned it

Lots of chatting. Looking at actual dollars and laws, we're weighing the elephants of China, India and increasingly the EU against...Singapore, El Salvador and Malta?

Outside young men, disproportionately minorities, crypto has a limited beachhead [1]. It was an easy money phenomena with historic comparison. We're now seeing the regulatory mood shifting decisively against it with limited competent pushback.

> a16z is a large investor in the space and proponent

They're notable for where they're prominent and where they're not. Aggressive fundraising followed by SoftBank/Tiger style deployment. Tweets and blog posts galore. Yet middling returns, even on an internal basis, and absolutely zero presence worth mentioning in D.C.

I'm no greybeard. But I've worked in finance long enough to see the game they're playing.

[1] https://www.pewresearch.org/fact-tank/2021/11/11/16-of-ameri...

Re:Nomad drained of $150m due to a coding mistake by rjbwork on Tuesday August 02, 2022 @11:14AM (#32319593)
I don't think it is a minority. In my personal and work life, it does seem to be something like 80/20 or 90/10.

You might be right though, it's impossible to tell without doing some kind of vaguely rigorous poll.

Re:Nomad drained of $150m due to a coding mistake by FabHK on Tuesday August 02, 2022 @04:35PM (#32323959)
> Only 100000x less efficiently.

You're being too kind to crypto there, I think, by a few orders of magnitude.

Re:Nomad drained of $150m due to a coding mistake by yarg on Tuesday August 02, 2022 @05:07PM (#32324315)
Only 2^200 times less efficiently (even that's generous).
Re:Nomad drained of $150m due to a coding mistake by FabHK on Tuesday August 02, 2022 @05:25PM (#32324480)
I'd say between 1e7 and 1e11. 1e5 is too generous, 1e60 is way too harsh.
Re:Nomad drained of $150m due to a coding mistake by yarg on Tuesday August 02, 2022 @06:20PM (#32324999)
When a fundamental part of token generation is brute-forcing secure hashes?
Re:Nomad drained of $150m due to a coding mistake by FabHK on Thursday August 04, 2022 @05:42PM (#32348672)
Yes, but you still need, say, one computer to run what Bitcoin does (without the PoW hashing - just checking and recording 5 transactions per second). BTC uses around 15 GW currently, a computer say 15 to 150 W, so we are talking a factor of 1e9 (Giga) to 1e10.
Re:Nomad drained of $150m due to a coding mistake by Ekaros on Tuesday August 02, 2022 @01:20PM (#32321618)
Actually yes. I think crypto promoters are either idiots or grifters...