Hacker News new | ask | show | jobs
by joshcryer 1459 days ago
What's crazy is they never "fixed" The DAO "bug." Reentrancy is a feature of Solidity. They just tell people to make sure to do exception checking for it. Which of course makes contracts bloated. Which in turn makes contracts cost more in gas fees. So every now and again a Defi will be attacked by the very, same, thing, that got The DAO, because they didn't put in expensive reentrancy checks. Couple of recent examples: https://ambcrypto.com/how-these-two-defi-protocols-fell-prey...
1 comments

Yup. The combo of “this is hyper critical financial code” and “every extra instruction to check invariants is very expensive” are two fundamentally opposed ideas and will cause pain forever.