4 ms·
"That said, if I understand it, the "attacker" was just the first person to truly understand the contract and exploit that understanding, no? If what happened i
by rsync 9y ago
"That said, if I understand it, the "attacker" was just the first person to truly understand the contract and exploit that understanding, no? If what happened isn't what the creators of the contract intended, then that's the fault of the creators, not the "attacker"."
I would go even further and suggest that the user (not "attacker") of this ethereum contract proudly stand up and identify themselves - without fear of retribution.
This individual played their game by their rules.
They are not an attacker, this was not a hack, and nothing was stolen.
- UncleMeat 9y agoHow is this any different than exploiting a web application via something like SQL injection? After all, their implementation legally allows you to supply inputs containing those characters and their system responds by doing whatever with the database. Is that fundamentally different than supplying "expected" input and getting expected outputs? "Your program just computes a different function than you expected and I supplied legal inputs" can be used as a defense of literally all software exploitation.
- jacquesm 9y agoHe or she shouldn't just stand up and identify themselves, they should claim their right. It would in a way be the ideal case to litigate.
- thinkmassive 9y agoIt's a glorious hack in the original sense of the term.