Hacker News new | past | comments | ask | show | jobs | submit login

Sounds like an actual use case for staking - bug bounties on teh blockchain!



Hopefully, probably sarcastic, but just in case you're not: who puts the data on the blockchain?


The company posting the bounty. Third party verifies the bug. Why sarcastic?


Why doesn’t the third party publish the data themselves then?


The third party doesn't know about the vulnerability. Company C posts bug bounty B in contract. Researcher X discovers vulnerability. Validator Y confirms the vulnerability and X gets paid (1-f)B where f is validator fee.


OK, so why doesn't Y hold the money as well, given that they're in the position of deciding whether or not X gets it?




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: