3 ms·
threatening someone who has the ability to intentionally introduce a vulnerability into even a relatively small cryptocurrency probably has the potential to be
by jrsj 4y ago
threatening someone who has the ability to intentionally introduce a vulnerability into even a relatively small cryptocurrency probably has the potential to be insanely profitable, and the odds of it even being investigated are far lower than any other form of fraud (for now).
There’s plenty of good reasons to go after some specific blockchain engineers who could do this, but otherwise yeah it seems kind of silly and over dramatic.
- HWR_14 4y agoIf the oversight on your project is so weak that an engineer can add code that steals money without being noticed, all you do is change who profits from the inevitable theft. In fact, if you allow the code to be delivered anonymously, you practically guarantee that smart people will add the vulnerability and steal the money.
- jrsj 4y agoI think stronger oversight and less trust is sort of implicit in a pseudo-anonymous model. An attack like I described doesn’t require something as obvious as “code that steals money” either, it could be something much more innocuous that even afterwards appears to have been a mistake. Almost any type of bug combined with a well timed leveraged short position could result in big profits.