Ethereum Smart Contract Bugs
The cluster focuses on security vulnerabilities, bugs, and exploits in Ethereum smart contracts, frequently referencing the DAO hack, hard forks, and the challenges of writing immutable, secure code that handles real financial value.
Activity Over Time
Top Contributors
Keywords
Sample Comments
Ethereum tried this, and a bug in the code lead to millions of dollars of value lost. They ended up hard-forking the code by changing it to match the intended outcome of the code, thus reversing the actual outcome of the execution of that code.Eventually you'll have millions of lines of code, and within those millions of lines of code there will be a bug. It's no different than writing a legal contract in English. In both cases you can only do your best to make sure there is no misu
what if the "smart" contract has a bug?Also now I have to trust the smart contract developer
Hell, what happens if the "smart contract" is poorly coded, and someone exploits it?
I believe it's not core Ethereum that has issues, it's buggy smart contracts. They don't make it particularly difficult to write insecure contracts, though.
I'd say this is a problem of a really new tech, with the advanced attack vectors and methodologies we have nowadays.Thankfully, other cryptos (such as Cardano) are building their smart contract platform with correctness/security in mind (compiler checks and so on), so we might see less problems like this.
Remember what happened with the 2016 Ethereum DAO?Even expert programmers aren't able to check smart contracts for all possible issues.
Ethereum just had a hard fork where a ,,quick patch'' for a bug was created 2 days before the fork. The developers didn't agree if there should be a hard fork or no at that point. I would never put my money on a system like this, and I would never roll out a system like this where I can make tens of billions of dollars of damage so easily.Also people who were using an official Ethereum multi-sig wallet to be extra safe lost real money, because the devs don't even bother te
That's about as advisable as asking it to write firmware for a pacemaker. Smart contracts are some of the most delicate codebases - even a tiny bug can cause you to lose a lot of money. With a model like this bugs are very likely, especially in such a niche domain.
I'd be incredibly wary of using Ethereum contracts for this. The DAO has shown that writing software is apparently difficult.
> Ethereum has had lots of these hacks, due to bugs in the smart contracts provided.Code is law, bro. These aren't hacks or bugs. They are inert chunks of code that all play by. Even "bugs" in the execution engine are fair game when code is law...The fine folks who carefully investigated the DAO smart contract and transferred lots of its value to their possession are just as entitled to that wealth as the people who possessed it in the first place. There was no hacking an