5 ms·

> You have to be an absolute tool to use the poly network for anything serious ever again agreed > A digital contract was used in a way that complied with the

> You have to be an absolute tool to use the poly network for anything serious ever again agreed > A digital contract was used in a way that complied with the contract that the bonehead writers of that contract did not intend. That's it I kind of disagree in philosophy here. If there's a bug in a bank API that lets me transfer funds to my account, I'm still "hacking", even if I'm doing exactly what the API lets me do, because I know very well that I'm not supposed to. Then again, as you say, the whole spiel of digital contracts is that theyre far too clever to need silly courts and judges and common sense and all that, so... meh

blowfish721 5y ago
Isn’t that the point though, when you access a bank api you have signed a contract in order to access it that states what is allowed and what’s not, the api code is not the contract but a way to access what you are allowed. With smart contracts the code is that contract so if the code allows it then it should be allowed.
- spyder 5y ago
  You don't have to sign a contract to find vulnerabilities in an API. The thing that you have to obey is the law. Just because we call it smart contracts it isn't above the laws.
pcthrowaway 5y ago
Something that seems to be missed here, is that the bank has their physical servers owned by an institution, which you are exploiting. There is no physical server for Ethereum, the Smart Contracts don't exist anywhere. You are likely also violating the terms of usage of the API and various other legally enforceable contracts by breaching the API. If a smart contract included a terms of use however, it would be interesting to see whether this could be considered enforceable.
- wizzwizz4 5y ago
  > There is no physical server for Ethereum, the Smart Contracts don't exist anywhere. There is no one physical server. I think this is misleading.
  - pcthrowaway 5y ago
    It's a decentralized network. I mean it remains to be seen what jurisdictions consider smart contract exploits to be prosecutable, or whether they're even crimes.

blowfish721 5y ago

Isn’t that the point though, when you access a bank api you have signed a contract in order to access it that states what is allowed and what’s not, the api code is not the contract but a way to access what you are allowed. With smart contracts the code is that contract so if the code allows it then it should be allowed.

spyder 5y ago
You don't have to sign a contract to find vulnerabilities in an API. The thing that you have to obey is the law. Just because we call it smart contracts it isn't above the laws.

pcthrowaway 5y ago

Something that seems to be missed here, is that the bank has their physical servers owned by an institution, which you are exploiting. There is no physical server for Ethereum, the Smart Contracts don't exist anywhere. You are likely also violating the terms of usage of the API and various other legally enforceable contracts by breaching the API. If a smart contract included a terms of use however, it would be interesting to see whether this could be considered enforceable.

wizzwizz4 5y ago
> There is no physical server for Ethereum, the Smart Contracts don't exist anywhere. There is no one physical server. I think this is misleading.
- pcthrowaway 5y ago
  It's a decentralized network. I mean it remains to be seen what jurisdictions consider smart contract exploits to be prosecutable, or whether they're even crimes.