5 ms·

I don't think you can generalize Web3 companies to all software companies. Web3 companies have shown time and time again that they don't care much about securit

by xmprt 4y ago

I don't think you can generalize Web3 companies to all software companies. Web3 companies have shown time and time again that they don't care much about security or good software development practices. I'm not sure if it's because the industry is so nascent or because the people joining are simply incompetent or because they don't care (or a combination of all three) but it's clear that Web3 companies have major incidents at higher rates than most other software companies.

ChadNauseam 4y ago
> clear that Web3 companies have major incidents at higher rates than most other software companies I won't argue this, but I think that it depends on where you look. Cryptography audit services are books out for months or years because of the demand from cryptocurrency projects. There's never been a vulnerability in the Bitcoin or Ethereum networks that allowed an attacker to steal funds or execute a double-spend. And cryptocurrency projects have pioneered whole fields of cryptography like zksnarks for security purposes. Cryptocurrency projects often have a fundamentally very difficult problem to solve, and attackers are also very sophisticated. There are currently very few people with the expertise needed to implement a complex cryptocurrency project securely. Disclaimer: I'm a protocol developer for a cryptocurrency project (not one of the ones mentioned here)
- TimPC 4y ago
  Except you know that time Ethereum forked because the core contract on Ethereum was stolen.