5 ms·

Personally I found this article much clearer than the paper: https://www.palkeo.com/en/projets/ethereum/bzx.html https://www.palkeo.com/en/projets/ethereum/bzx.

by qqii 6y ago

Personally I found this article much clearer than the paper: https://www.palkeo.com/en/projets/ethereum/bzx.html https://www.palkeo.com/en/projets/ethereum/bzx.html You can actually follow the money yourself: https://etherscan.io/address/0x148426fdc4c8a51b96b4bed827907b5fa6491ad0 https://etherscan.io/address/0x148426fdc4c8a51b96b4bed827907... https://etherscan.io/address/0xb8C6Ad5fE7CB6cC72F2C4196dca11FbB272A8cbF https://etherscan.io/address/0xb8C6Ad5fE7CB6cC72F2C4196dca11... It looks like neither attacker was able to cash out, but the seccond attacker is moving his funds around even to this day.

zaroth 6y ago
Thank you this is a much better place to read about the attack and the bugs in the contracts which allowed it to be pulled off.
andybak 6y ago
That reads like an analysis of some big event in Eve Online. Fascinating but I obviously have no understanding of either.
- dannyw 6y ago
  Smart contracts are basically code that can execute and directly interact with cryptocurrency and crypto-tokens. This code is executed atomically; every block; and the entire namespace of Ethereum is callable allowing you to pull together any other contracts or platforms.
KirillPanov 6y ago
> It looks like neither attacker was able to cash out, What makes you say that? If they wanted to, they could simply send the funds back to Tornado Cash, which is basically Zcash-running-on-Ethereum-EVM. The seed funds to run the attack came out of Tornado Cash. It's liquid enough to handle a deposit this size, although it probably wasn't liquid enough back in May.
dang 6y ago
Ok, we've changed the URL to that from https://arxiv.org/abs/2003.03810 https://arxiv.org/abs/2003.03810. Thanks!
- lawrenceyan 6y ago
  I disagree with your choice to change the URL. The paper is far more comprehensive in its analysis.
  - dang 6y ago
    Ok, I've pinned a link to the paper as the top comment so most people will see both.

by qqii 6y ago

zaroth 6y ago

Thank you this is a much better place to read about the attack and the bugs in the contracts which allowed it to be pulled off.

andybak 6y ago

That reads like an analysis of some big event in Eve Online. Fascinating but I obviously have no understanding of either.

dannyw 6y ago
Smart contracts are basically code that can execute and directly interact with cryptocurrency and crypto-tokens. This code is executed atomically; every block; and the entire namespace of Ethereum is callable allowing you to pull together any other contracts or platforms.

KirillPanov 6y ago

> It looks like neither attacker was able to cash out, What makes you say that? If they wanted to, they could simply send the funds back to Tornado Cash, which is basically Zcash-running-on-Ethereum-EVM. The seed funds to run the attack came out of Tornado Cash. It's liquid enough to handle a deposit this size, although it probably wasn't liquid enough back in May.

dang 6y ago

Ok, we've changed the URL to that from https://arxiv.org/abs/2003.03810 https://arxiv.org/abs/2003.03810. Thanks!

lawrenceyan 6y ago
I disagree with your choice to change the URL. The paper is far more comprehensive in its analysis.
- dang 6y ago
  Ok, I've pinned a link to the paper as the top comment so most people will see both.