4 ms·
> Formal Verification: Get an absolute 100% guarantee that your contracts are free of errors Seems to me that should be priority #1 considering there's potenti
by UncleEntity 9y ago
> Formal Verification: Get an absolute 100% guarantee that your contracts are free of errors
Seems to me that should be priority #1 considering there's potentially millions of $local_currency riding on these contracts and they seem to be done with the hard forks when one goes awry (though I was reading that they collude to make it really, really hard to sell off the ill gotten gains).
- emmab 9y ago> Formal Verification: Get an absolute 100% guarantee that your contracts are free of errors This is not actually possible, there could have been an issue with your threat model. e.g. side-channel attacks could be out of scope.
- bpicolo 9y agoFormal verification only ever verifies as far as your spec specifies
- mannykannot 9y agoThat is true, but it should not be assumed that a spec. is a thing of fixed validity. A formal spec. has a reasonable likelihood of being less ambiguous, incomplete or self-contradictory than an informal one, or whatever substitutes for a spec. in an agile approach.
- masklinn 9y agoThat only tells me a spec and its formal verification are necessary but not sufficient assets. Not "we can't prove everything so we'll keep our millions riding on half-assed piles of garbage.
- neuralzen 9y agoA ycombinator backed project called Quantstamp aims to preform security audits for smart contracts, and seems like a very necessary part of the platform ecosystem that is developing.