3 ms·
This is mostly infeasible because the VM has no idea what's worth anything. There is no reasonable price in absolute terms for a BTC or ETH or DOGE or $DUMBCOI
by jwlake 5y ago
This is mostly infeasible because the VM has no idea what's worth anything. There is no reasonable price in absolute terms for a BTC or ETH or DOGE or $DUMBCOIN.
The key is that the contracts need to be minimal and analyzable, so its ~100 lines of code you can manually analyze. Documented separately all the edge cases, or ideally removed through good design so they simply don't exist. A bunch of problems I've seen in the real world of crypto are annoying edge cases that you can fix with an if statement, or ideally change the design to remove them completely. It's actually a surprisingly hard space because you're trying to make terse, complete and secure code.
In normal web/systems programming you have layers of security; internal services, external services, firewalls, access controls, vpns, security by obscurity, etc etc etc. In crypto you have none of that. Everything is 100% public, the code probably should be published, or else it is trivially decompiled. If there is a problem someone will find it if there is value in finding it.
- raverbashing 5y agoThanks for your comment. Yes I agree the absolute value in some coin is not a great metric. > In normal web/systems programming you have layers of security; In crypto you have none of that. Yes, that's what I mean. Why not? > The key is that the contracts need to be minimal and analyzable Agree, but even short contracts might have bugs. Betting on "self-paying bug bounts" is not a good bet. What I'm proposing is that every smart contract double-checks its expected results