News for hackers. Stuff that matters.
Re:Bybit CEO Confirms Exchange Was Hacked for $1.46B by tumdum_ on Saturday February 22, 2025 @03:47AM (#43137334)
> with turing-complete arbitrary computations in EVM this becomes very difficult.

I have very limited knowledge about EVM, but those computations are bounded by gas, right? Evaluating them is a finite process.

Re:Bybit CEO Confirms Exchange Was Hacked for $1.46B by porkbrain on Saturday February 22, 2025 @04:09AM (#43137437)
[delayed]
Re:Bybit CEO Confirms Exchange Was Hacked for $1.46B by simpsond on Saturday February 22, 2025 @07:28AM (#43138399)
Yes, each opcode has a gas cost. Some are quite expensive, like writing storage (changing network state). Each block has a target gas limit. Say 30 million. A single transaction cannot exceed that. Additionally, a transaction specifies a bid on how much they are willing to spend, in ether, per gas. That said, transferring funds does not typically require significant gas.
Re:Bybit CEO Confirms Exchange Was Hacked for $1.46B by dboreham on Saturday February 22, 2025 @09:11AM (#43139072)
What you suggest is possible (evaluate the side effects of the transaction and present that information to the prospective signer). But at present they don't do that. I'm not sure about this specific case but often it's just a supplied text string (that can say anything) that's displayed. Basically the system depends on trust in whatever came up with the transaction payload.
Re:Bybit CEO Confirms Exchange Was Hacked for $1.46B by DennisP on Saturday February 22, 2025 @12:34PM (#43141093)
You can at least display the parameters that you're passing into a contract function. That keeps you from getting hacked when interacting with a well-known trustworthy contract.