Hacker News Reader

Comment by latchkey | Hacker News Reader

Another one _just_ happened... $10m. This time using the wrong variable.

https://bearn-defi.medium.com/bvaults-busd-alpaca-strategy-e...

What is the purpose of Solidity? Why did there need to be a new language for interacting with the Ethereum Virtual Machine? This really couldn't be accomplished by a python SDK?

Not an expert in solidity but from my limited experience EVM and smart contracts have really different approach when it comes to computation.

two things that come to my mind:

- There is really no random() function due to need for determinism

- Space vs. Time complexity is distorted, the gas you pay for instruction vs. byte is really different economics compared to AWS EC2 instance/hour etc.

Interesting, do you suggest any sources to read more about this?

Not sure about articles but I can recommend Crypto Kittens Tutorial[1].

It has been some time since I did it(Late 2018 I think), but was really informative to get the mindset and different constraints people deal with in smart contract world.

[1] https://www.cryptokitties.co/kitten-class/breeding/introduct...

What's the benefit? These are all human errors, easily reproducible in any language.

So none? Because I’d expect a langage custom built for smart contract to prevent or at least mitigate issues like mixing unrelated objects or never updating variables.

Solidity is a DSL. DSLs have their purposes and this happened to be a correct purpose. It just also happens to be that Solidity is a terribly designed language.

In what way is Solidity terribly designed?

Not an expert, but integer overflows getting silently truncated sounds pretty terrible. I understand there are safe arithmetic libraries, but overflow exceptions should have been built right into the VM

I agree. Thankfully, this was fixed in Solidity version 0.8 (released December 2020). Arithmetic operations now automatically revert on overflow/underflow, unless the programer explicitly wraps them in an "unchecked" block (sort of like how Rust supports "unsafe" blocks).

It's modelled after JS with the explicitly expressed intent to get web devs from JS to Solidity.

And it worked.

Except that it has all of the ergonomics of mid-2000s PHP and MySQL. Hah, this comment from a discussion here in 2017 also explicitly compares it to PHP of that era :)

https://news.ycombinator.com/item?id=14691212

tldr; there is. Also, Gavin wood the writer of the Solidity programming language left etheruem and founded polkadot, writting substrate and ink in the process.

Solidity is just a programming language to call functions and code on the blockchain. You can theoretically write it in any language but need to compile down to EVM at some point.

Solidity wasn't writting from the ground up to be safe and secure. There are a number of projects like vyper, which is a pythonesque language that compiles to the EVM. It's more centered around safety.

> Contacted Binance Authorities immediately to block the hacker(s) fund transfers

I don't understand this part. I thought crypto was decentralised and so nobody controls anything. Yet, this suggests the opposite... some entitiy somewhere can shut you out on a whim.

This is on the Binance chain which is a fork of Ethereum that is partially centralized. A lot of crypto purists refuse to use it for this reason.

Nobody can force you to do business with them. Binance can't stop the transaction they can just not do business with that person.

lol wrong. The validators can coordinate to make a transaction invalid on that blockchain. They wont though because of theyll lose a lot of confidence in their network, and users can exit their funds across the bridge very quickly.

That blockchain is controlled by 21 validators of which Binance itself is many.

They wont and dont block the transaction though. The bridges to other blockchains are very fast, and hacker would be prudent to move their funds immediately to a blockchain with greater security.

For the crypto currency layman this reads like an article from some other weird parallel universe.

You get the idea that the article is talking about money but the details seem crazy like a dream.

Reply on news.ycombinator.com