4 ms·
At least up to this point, the amount of growth in the industry from moving fast and having buggy software (as opposed to moving slow and having fully verified
by Taek 5y ago
At least up to this point, the amount of growth in the industry from moving fast and having buggy software (as opposed to moving slow and having fully verified software) has more than made up for all the hacks. For every $600 million dollar hack, there's been $6 billion dollars in gains from growth in the industry. Moving slower means fewer hacks, but it also means lower growth, and the growth is the more important multiple right now.
As the growth slows down there will be an increased focus on best practices for smart contracts, on auditing, and on formal verification. There are also a lot of startups that are looking into insurance for smart contracts and crypto balances in general.
In general, the best experts in the space could probably write smart contracts with >100x fewer bugs than your typical smart contract. Especially with something as complex as the EVM it's difficult to assert that any piece of software is truly bug-free, but there are a lot of steps that can be taken to make them significantly more rare. It's just that these mitigating steps are more expensive than the growth at this time.
- gjulianm 5y agoThere are several issues with this. The main one is how can people trust a product that will let them lose money in the name of growth. The second one is that the more money, the more incentives to hack. And given that transactions are irreversible, you only need each bug once, you don't care that it's fixed later. So if a bug can report a hacker millions of dollars, there's going to be quite a lot of hackers researching, probably with more effort there than the effort put in best practices, audit and formal verification.