3 ms·
Pretty much all recent bugs are logic errors which have nothing to do with the language. The actual bugs are often things like typos that use > instead of >=, l
by nootropicat 5y ago
Pretty much all recent bugs are logic errors which have nothing to do with the language. The actual bugs are often things like typos that use > instead of >=, lagging price oracles or using oracles that can be manipulated. You asserted that loops are 'insecure' but in reality dumb restrictions only force people to invent complex workarounds to obtain the same functionality, making everything less secure, not more. The absolute disaster of trying to make dexes work on Cardano is the best recent example. Their 'safe' utxo design is so limiting dexes like Sundae had to implement a trust-based sidechain just to be able to trade tokens, and it barely works.
After years of iteration, Solidity is now the safest smart contract language in existence. All common pitfalls are either well known or have been fixed. There are code analyzers. The problem with EVM isn't security, but the fact its word is 32 byte long which limits computational performance - but not that much really.
- pfraze 5y agoHard to be definitive about this kind of analysis, but it’s interesting to look at some surveys (https://medium.com/solidified/most-common-smart-contract-bugs-of-2020-c1edfe9340ac https://medium.com/solidified/most-common-smart-contract-bug...).
- krmmalik 5y agoWhat about the DAML smart contract language? It's currently being used to digitalise the world's largest stock exchange (Hong Kong) and the Australian Securities exchange