Re:FTX Yikes
by jl2718 on Friday November 11, 2022 @04:53AM
(#33558823)
Mostly correct.
I had tokens stolen from a wallet using a fairly obtuse scheme involving ERC-20 token approval and a proxy contract. This is required for almost all DEX users, and really is a weakness of the EVM in that it restricts user transactions to single contract calls rather than sequences like smart contract internal transactions. There are ugly, insecure, incompatible, and expensive workarounds like smart contract wallets and exploding contract deployments. I guess I should probably raise an EIP to make this sane.
Re:FTX Yikes
by jl2718 on Friday November 11, 2022 @05:37AM
(#33559078)
Not phishing, but yes; very different issue. In this case, it was reported to the FBI as a private key disclosure through an old-fashioned MS Word macro virus, but I have my doubts versus inside job.
I had tokens stolen from a wallet using a fairly obtuse scheme involving ERC-20 token approval and a proxy contract. This is required for almost all DEX users, and really is a weakness of the EVM in that it restricts user transactions to single contract calls rather than sequences like smart contract internal transactions. There are ugly, insecure, incompatible, and expensive workarounds like smart contract wallets and exploding contract deployments. I guess I should probably raise an EIP to make this sane.