> Important: To avoid potential real-world harm, our work only ever tested exploits in blockchain simulators. We never tested exploits on live blockchains and our work had no impact on real-world assets.
Well, that's no fun!
My favorite we're-living-in-a-cyberpunk-future story is the one where there was some bug in Ethereum or whatever, and there was a hacker going around stealing everybody's money, so then the good hackers had to go and steal everybody's money first, so they could give it back to them after the bug got fixed.
The old version stayed around but (essentially) nobody wanted to use it. If they had, the forked version would be worthless. That is the difference. A cryptocurrency fork cannot succeed without the consent of the community. No one is compelled to use it the way that you are compelled to accept the decisions of a regulator.
yeah this sounds like direct plutocracy - money votes, not people.
Which I guess is a cricitism of crypto in general - if it were to be adopted widely, the rich can gang up any time on the rest of us and do an 50% vote to rewrite the votes - right now the 1% owns about 30% of wealth in the US - not a stretch to see it go to 50%
If people disagree with one particular regulation, you think it’s possible to vote someone in to fix that issue in isolation? I don’t think you have thought about this very deeply, either that or you’re completely ignorant of the political environment you inhabit.
they got feared into it by fear of being left behind. Pretending that majority can always make the good choice (even for their own benefit!) is, well, just look at state of US politics.
And it's WORSE, because there is no one person one vote, the amount of money have is directly proportional to the "voting power" in crypto currency.
It's been nine years since the chain split, which happened within the first year. No irregular changes have been made since then. Two major hacks caused over a hundred million dollars in losses to Parity, a company founded by one of the core devs. That dev lobbied heavily for rescue, and the community refused.
Bitcoin also made an irregular change, a year and a half into its history.
Listen, this is all code running on computers. At the end of the day everyone could choose to shut it down or replace it entirely and they criticism would still be: See not immutable! Eventually entropy makes everything mutable.
I’m surprised folks aren’t already grinding against smart contract security in prod with gen AI and agents. If they are, I suppose they are not being conspicuous by design. Power and GPU time goes in, exploits and crypto comes out.
Check the prizes for the bug bounties in big smart contracts. The prizes are truly crazy, like Uniswap pays $15,000,000 for a critical vuln, and $1,000,000 for a high vuln. With that kind of money, I HIGHLY doubt there aren't people grinding against smart contracts as you say.
Of course they are, and they've been doing it since long before ChatGPT or any of that was a thing. Before it was more with classifiers and concolic execution engines, but it's only gotten way more advanced.
As soon as money in larger sums gets involved, the legal system will crack down hard on you if you are anywhere in the Western sphere of influence, easy as that.
In contrast, countries like North Korea, Russia, Iran - they all make bank on cryptocurrency shenanigans because they do not have to fear any repercussions.
I mean they are, the only news here is that Anthropic isn't staffed by ignorant know-it-alls that wholesale dismiss the web3 development space like some other forum I know of
I couldnt find it in the article, how do they "assume" how many victims will fall to these contract exploits?
And to go further: if it costs $3500 in ai tokens, to fix a bug that could steal $3600, who should pay for that? Whos responsibility is it for "dumbass suckers who use other peoples buggy or purposefully malicious money based code" ?
At best this is another weird ad by anthropic, trying to say, hey why arent you changing the world with our stuff, pay up quick hurry
Contracts themselves can hold funds. Usually a contract hack extracts the money it holds.
$3500 was the average cost per exploit they found. The cost to scan a contract averaged to $1.22. That cost should be paid by each contract's developers. Often they pay much more than that for security audits.
Well, that's no fun!
My favorite we're-living-in-a-cyberpunk-future story is the one where there was some bug in Ethereum or whatever, and there was a hacker going around stealing everybody's money, so then the good hackers had to go and steal everybody's money first, so they could give it back to them after the bug got fixed.