News for hackers. Stuff that matters.
Re:Vouch by nl on Sunday February 08, 2026 @05:38PM (#46939304)
This thought pattern leads to crypto.

In that world there's a process called "staking" where you lock some tokens with a default lock expiry action and a method to unlock based on the signature from both participants.

It would work like this: Repo has a public key. Submitted uses a smart contract to sign the commit with along with the submission of a crypto. If the repo merges it then the smart contract returns the token to the submitter. Otherwise it goes to the repo.

It's technically quite elegant, and the infrastructure is all there (with some UX issues).

But don't do this!!!!

I did some work in crypto. It's made me realize that the love of money corrupts, and because crypto brings money so close to engineering it corrupts good product design.

Re:Vouch by rifty on Sunday February 08, 2026 @07:25PM (#46940075)
It feels like the problem here comes from the reluctance to utilize a negative sum outcome for rejection. Instead of introducing accidental perverse incentives, if rejected your stake shouldn't go to the repo, 50% could be returned, and 50% deleted (specific values just for illustration). If it times out or gets approved you get 100% back. If a repo rejects too often or is seen doing so unfairly reputation would balance participation.
Re:Vouch by nl on Sunday February 08, 2026 @09:49PM (#46941039)
No, the perverse incentive is that there will be RepoCoin, and the people involved will be incentivized to make the price of that as high as possible.
Re:Vouch by AnthonyMouse on Monday February 09, 2026 @12:07AM (#46941771)
> No, the perverse incentive is that there will be RepoCoin, and the people involved will be incentivized to make the price of that as high as possible.

Isn't this problem unrelated to cryptocurrency?

There will be the US dollar, and the people involved will be incentivized to keep its value high, e.g. by pressuring or invading other countries to prevent them from switching to other currencies. Or they'll be incentivized to adopt policies that cause consumer and government debt to become unreasonably excessive to create a large enough pool of debts denominated in that currency that they can create an inordinate amount of it without crashing its value.

Or on the other side of the coin, there will be countries with currencies they knowingly devalue, either because they can force the people in that country to accept them anyway or because devaluing their currency makes their exports more competitive and simultaneously allows them to spend the currency they printed.

If anything cryptocurrency could hypothetically be better at reducing these perverse incentives, because if good rules are chosen at the outset and get ossified into the protocol then it's harder for bad actors to corrupt something that requires broad consensus to change.

Re:Vouch by nl on Monday February 09, 2026 @12:54AM (#46941996)
Sure, but your average developer doesn't have a lot of agency in if the US invades another country in order to increase the value of the coin they got for having a PR merged.

But with crypto they do. See for example all the BAGS coins that get created for random opensource projects and the behavior that occurs because of that.

Re:Vouch by Karrot_Kream on Monday February 09, 2026 @03:24AM (#46942938)
Just use a stablecoin, don't float a "utility token" those things are stupid. Have a smart contract receive a USDC deposit. If the maintainer "times out" reviewing your PR, the contract returns all the deposit. If the maintainer does not accept your PR, the contract burns 0.5x of the deposit and returns the rest. Maintainers can decide to turn off the time-out for very popular projects where you probably would have devs trying to spam PRs for fame/recognition, but hopefully the deposit price can accurately reflect the amount of spam the project gets.

Utility tokens are fundamentally equities and you need to firewall equity from an organization the same way companies in most market economies are regulated.

Re:Vouch by AnthonyMouse on Monday February 09, 2026 @01:15PM (#46948724)
You don't even need to burn it, just send it to someone other than the developers, like the EFF, so the developers aren't given a perverse incentive.
Re:Vouch by AnthonyMouse on Monday February 09, 2026 @02:12AM (#46942444)
The average developer also doesn't have a lot of agency with respect to how major chains like Ethereum are run either, but they can use them.

Creating your own chain just because you can rather than because you actually have a reason to implement the technology in a different way than anybody else should be disfavored and viewed with suspicion.

Re:Vouch by nl on Monday February 09, 2026 @02:55AM (#46942714)
I'm talking about your own coin, not chain.

ERC20 tokens are part of Ethereum (and yes I realise there are also non ETH based tokens and that the gas cost of Eth makes them attractive etc etc)

Re:Vouch by rifty on Sunday February 08, 2026 @10:18PM (#46941199)
Ahh, I see now the angle you were coming at it from, my wrong!
Re:Vouch by satvikpendem on Monday February 09, 2026 @12:36AM (#46941911)
But it could just be made a stablecoin.
Re:Vouch by SR2Z on Monday February 09, 2026 @01:07AM (#46942062)
It's a huge shame that crypto has been so poorly-behaved as an industry that almost nobody is willing to touch it except for speculation. It could be useful but it's scared away most of the honest people.
Re:Vouch by backscratches on Monday February 09, 2026 @05:43AM (#46943793)
The fact that people around the world are trading hundreds of billions of dollars of stable coins [1], with India, Pakistan, the Philippines and Brazil in the top five countries [2], not least of all for the purpose of "greater monetary stability" [3], I think points toward the revolutionary usefulness of its inherently non-speculative properties (as referenced in positive applications of crypto in above comments).

It really has been a shitshow of get rich schemes, and yet crypto keeps not dying, instead increasingly getting applied to extremely valuable real world every day use cases, which I think is evidence of the value of the inherent technology.

[1]https://defillama.com/stablecoins [2]https://www.trmlabs.com/reports-and-whitepapers/2025-crypto-... [3]https://www.goldmansachs.com/what-we-do/goldman-sachs-global...

Re:Vouch by weedhopper on Monday February 09, 2026 @07:58AM (#46944759)
The greed has ruined it, and the greed and desperation to get rich at all costs keeps it alive.
Re:Vouch by backscratches on Monday February 09, 2026 @08:35AM (#46945040)
My point is that despite the incredible greed and desperation it not only doesn't die, its practical uses are growing. The numbers say that the actual value exceeds the grift.
Re:Vouch by toddmorrow on Tuesday February 10, 2026 @11:13AM (#46961912)
gitcoin lol
Re:Vouch by AlexCoventry on Sunday February 08, 2026 @07:59PM (#46940336)
> because crypto brings money so close to engineering it corrupts good product design.

Amen.

Re:Vouch by oofbey on Sunday February 08, 2026 @11:34PM (#46941622)
No. Just because you can use crypto for something doesn’t mean you should. In fact you almost never should.
Re:Vouch by miki123211 on Monday February 09, 2026 @03:23AM (#46942925)
The "money goes to the repo part" is the problem here, as it incentivizes maintainers to refuse legitimate pull requests.

Crypto has a perfect way to burn money, just send it to a nonexistent address from where it can never be recovered. I guess the trad fi equivalent are charitable donations.

The real problem here is the amount of work necessary to make this viable. I bet Visa and Mastercard would look at you funny if your business had such a high rate of voluntary transaction reversals, not to mention all the potential contributors that have no access to Visa/MC (we do want to encourage the youth to become involved with Open Source). This basically means crypto, and crypto has its own set of problems, particularly around all the annoying KYC/AML that a normie has to get through to use it.

Re:Vouch by boltzmann-brain on Monday February 09, 2026 @05:05AM (#46943564)
> The "money goes to the repo part" is the problem here, as it incentivizes maintainers to refuse legitimate pull requests.

That's not true. The issue is that the system the comment you're replying to described is escrow. Escrow degenerates in the way that you describe. I explain it a bit more in this comment elsewhere on this post:

https://news.ycombinator.com/item?id=46943416

A straight up non-refundable participation payment does not have this issue, and creates a different set of incentives and a different economy, while there also exist escape hatches for free-of-charge contributions.

> The real problem here is the amount of work necessary to make this viable.

Not necessarily. This article mentions Tezos, which is capable of doing such things on-chain already:

https://news.ycombinator.com/item?id=46938811

> all the annoying KYC/AML that a normie has to get through to use it.

There are always escape hatches. If your code is so great that people will want to pull it, then you don't pay to push. If it's not really that great, then what are we talking about? Maybe it disincentivizes mid code being pushed. So be it.

You can make friends, you can make a name for yourself, you can make a fork that's very successful and upstream will want to pull it in, you can exert social pressure / marketing to get your code merged in. Lots of options that do not involve KYC/AML.

For everyone else, I'd say KYC/AML are a good idea because of the increasing amount of supply chain exploits being pushed out into repos. If pushing by randos is gated by KYC/AML, then there's at least some method of chasing the perps down and taking them to justice.

That's a win-win-win-win situation. Less mid code, less exploits, earnings for maintainers, AI slop blocked. Absolutely amazing.

Re:Vouch by sethammons on Monday February 09, 2026 @06:06AM (#46943948)
You can reduce the transactions with payment providers. Instead of money exchanging from contributor to maintainer, have a token exchange. Contributors fund tokens with real money, and pull requests cost and refund tokens. Like an escrow account. But the money never goes to the target system. There are no perverse incentives to steal tokens. If you get a reputation of not refunding tokens (which have no value to a maintainer), then contributors will dry up.

"TrustTokens" or "EscrowTokens"

Re:Vouch by MichaelZuo on Monday February 09, 2026 @08:38AM (#46945068)
Probably just making it non refundable works almost as well (since time really is expended reading it), without the hassle of spinning up an intermediary layer blockchain.
Re:Vouch by Wowfunhappy on Monday February 09, 2026 @07:36AM (#46944559)
> I bet Visa and Mastercard would look at you funny if your business had such a high rate of voluntary transaction reversals

…you might be right, but I do wonder if the situation would be different if “your business” was “Microsoft”. Obviously they would discuss this plan ahead of time.

Re:Vouch by cortesoft on Monday February 09, 2026 @12:12PM (#46947817)
> I bet Visa and Mastercard would look at you funny if your business had such a high rate of voluntary transaction reversals

Plenty of businesses do the “your credit card will be charged $1 and then reversed” as a verification method that I don’t think it would be a major issue. I do wonder how much those companies are paying for that, though… I am guessing they lose some of that $1.

Re:Vouch by toddmorrow on Tuesday February 10, 2026 @11:12AM (#46961881)
right, the ethereum gets spent whether the transaction is cancelled or not. and that's an issue
Re:Vouch by awestroke on Monday February 09, 2026 @05:44AM (#46943797)
I see no advantage with this over real money transfers. At all. Just use some kind of escrow.
Re:Vouch by Hendrikto on Monday February 09, 2026 @06:59AM (#46944298)
You don’t need a third party, or anybodies permission, nobody can censor you or block your transactions, you don’t need a bank account with everything that entails. The barrier of entry is the same as creating an SSH keypair. It works globally, fast, cheap. You do not need to trust anybody, all the code is open and the ledger is cryptographically verifiable by anyone. There are lots of advantages.
Re:Vouch by awestroke on Tuesday February 10, 2026 @01:41AM (#46956139)
In this scenario, the repo owner can just merge the patch but still refuse to pay back the shitcoin. With escrow, the escrow entity would act as an arbiter
Re:Vouch by chairmansteve on Monday February 09, 2026 @07:55AM (#46944741)
"It's made me realize that the love of money corrupts".

Yep. How about $1 per PR. The submitter gets to choose from a list of charities. No refund if the PR is accepted.

The goal is to get rid of junk PR's. This would work. There could be a central payment system, which any open source project can integrate with. It could accept payment in say India, of the Indian PPP of $1, so you aren't shutting out poorer developers.

Re:Vouch by account42 on Monday February 09, 2026 @08:22AM (#46944926)
I would not pay any amount of money, even a trivial one, for the privilege of being able to do free work for a project - and I don't think I'm an outlier here.
Re:Vouch by wongarsu on Monday February 09, 2026 @12:17PM (#46947893)
Most of my PRs are drive-by PRs: I have an problem, maybe a bug or missing feature, that annoyed me enough to fix it. And because I want to use future versions without the work of maintaining a fork I instead invest the work to upstream the fix. A step that is sometimes more work than the fix itself. At that point I wouldn't mind paying $1 to get that PR looked at and merged.

But that is not the only type of PR. We clearly need escape hatches for people who engage with a project on a deeper level.

Re:Vouch by chairmansteve on Wednesday February 11, 2026 @12:25PM (#46977865)
"We clearly need escape hatches for people who engage with a project on a deeper level".

Yep. The project maintainer can whitelist those people.

Re:Vouch by anonymousab on Monday February 09, 2026 @09:36AM (#46945646)
Another way to think of it is: paying $1 to have your pr and concerns elevated above the supermajority sea (that which will be ai driven contributions). For that cost, it's a steal of the deal.

Then, from the perspective of "it's a donation to a project you care about" it becomes even more rational. But the project itself getting the money has all the problems others have outlined already, so that idea's a bit bust.

Re:Vouch by KawaiiCyborg on Monday February 09, 2026 @12:22PM (#46947981)
> "it's a donation to a project you care about"

But I'm already donating my time by creating a PR, it definitely would disincentivize me to make PRs if I had to also pay in addition to already doing the actual work. Just always such a shame that the good people have to suffer because of the actions of the shitty people...

Re:Vouch by mring33621 on Monday February 09, 2026 @12:43PM (#46948267)
Nope. From the POV of the maintainer, you are creating extra, and probably unnecessary, work for them.
Re:Vouch by KawaiiCyborg on Monday February 09, 2026 @03:43PM (#46950959)
If that's actually the opinion of the maintainer, why even accept PRs at all? At that point, just categorically deny any. I was thinking more of actual community projects that _want_ community PRs. Those seem to have welcomed my contributions in the past, but of course they were not just AI slop or other low effort PRs.
Re:Vouch by chairmansteve on Wednesday February 11, 2026 @12:21PM (#46977805)
The money is going to a charity of your choice.
Re:Vouch by kaicianflone on Monday February 09, 2026 @09:06AM (#46945339)
I think the core insight here is about incentives and friction, not crypto specifically.

I’m working on an open source CLI that experiments with this at a local, off-chain level. It lets maintainers introduce cost, review pressure, or reputation at submission time without tying anything to money or blockchains. The goal is to reduce low-quality contributions without financializing the workflow or creating new attack surfaces.