4 ms·
> All computations on Ethereum have to be funded with "gas" (transaction fees) But that's what was wrong with the exploited DAO code - it didn't use gas. The p
by amaks 10y ago
> All computations on Ethereum have to be funded with "gas" (transaction fees)
But that's what was wrong with the exploited DAO code - it didn't use gas. The point of the article is that it's very hard or impossible to verify the correctness of the smart contracts.
- aakilfernandes 10y ago> it didn't use gas this is incorrect
- amaks 10y agoWell perhaps but I read this article (http://vessenes.com/deconstructing-thedao-attack-a-brief-code-tour/ http://vessenes.com/deconstructing-thedao-attack-a-brief-cod...) and it says: "OK, here we go. _recipient.call.value()() is called without a gas amount. That is easily attackable with an attacking wallet."
- deleted 10y ago[deleted]
- aakilfernandes 10y agoAh, that means the exact opposite ie "use as much gas as needed". This is different from the default _recipient.send() which would be limited to 2300 gas
- goldenkey 10y agoIt doesn't matter if it uses gas when you are getting free eth...