The 1 line of code that broke DeFi

Подписаться 164 тыс.

Просмотров 4,2 тыс.

50% 1

FREE MASTERCLASS "Get Into Web3 In a Bear Market"
👉 Link: eattheblocks.c...
👉 Full roadmap to learn Web3 Development & get a 6 figure remote job
👉 EVEN during this bear market
SMART CONTRACT SECURITY COURSES
👉 Smart Contract 101 & 202 courses available in the Learn Build Earn Package (Link below)
👉 Learn Build Earn Package: eattheblocks.c...

Опубликовано:

7 сен 2024

Ссылка:

Скачать:

Готовим ссылку...

Добавить в:

Мой плейлист

Посмотреть позже

Комментарии : 36

@EatTheBlocks Год назад

FREE MASTERCLASS "Get Into Web3 In a Bear Market" 👉 Link: eattheblocks.com/masterclass 👉 Full roadmap to learn Web3 Development & get a 6 figure remote job 👉 EVEN during this bear market

@mihirsinhparmar255 Год назад

Hey Julian, It's not only Vyper's fault. Curve's contract had a mistake. remove_liquidity was the didn't use checks-effects-interaction. I can prove it. If they followed standard, Vyper's error wouldn't have caused it.

@aasavravi5919 Год назад

what exactly do u mean?

@abdu1wahid105 Год назад

Vyper got sloppy

@aasavravi5919 Год назад

Biaatch , where's the proof??????

@jan-henrikbathelt8672 Год назад

What happened, you are funny now and not only informative! GJ!

@EatTheBlocks Год назад

haha thx!

@superzazzaful Год назад

Great explanation, thanks!

@EatTheBlocks Год назад

Thank you! 🎉

@luiscallero6288 Год назад

awesome explanation! Thank you very much! Solitity Rules!!!

@EatTheBlocks Год назад

Thanks!

@ciaopizzabella Год назад

A lot of useful info in this video. Good videos lately 👍

@EatTheBlocks Год назад

Thanks!

@3obby Год назад

Why use vyper rather than solidity? Hard to argue it is safer after seeing this. Also, I dont really understand why use a reentrance lock instead of just decrementing the value before transferring the value. Complexity = wider attack surface

@EatTheBlocks Год назад

That was a rare bug. I still think Vyper is safer than Solidity. But in the end what matters is the skills of the developers, and the audits.

@bartjanc Год назад

If not using a re-entry guard: would substracting the withdrawn eth BEFORE sending it nullify the re-entry attack? As the re-entry should already see the lowered eth amount once the funds are received, right?

@slavikcryptoes1714 Год назад

Could you do a similar one about the Mango hack please?

@EatTheBlocks Год назад

Good idea

Год назад

I think Curve Finance has insurance, right?

@EatTheBlocks Год назад

Aave has a $330M insurance fund, Curve Finance I am not sure.

@regularguy9702 Год назад

Vyper course any idea?

@EatTheBlocks Год назад

Good idea! I will think about it.

@bennyx1281 Год назад

Hi are flash loans still good this year ?

@EatTheBlocks Год назад

yes

@littcloudcanada Год назад

Brother, I really like the last few minutes, you stated the same issues that most people dont get in our daily lives, in a few work? where is the basics? where are the foundation? why to focus up there if we have mayor issues down here? it is like when people have a problem, they focus in what was said in angry moments but not in what caused the reaction or the root to get someone there. so the loser cover it up with some new drama. lol

@RussellThomason Год назад

Welcome to the robbery forest, you're never going to avoid this shit on Ethereum.

@EatTheBlocks Год назад

haha, it's a challenging environment but a lot of work is being done to secure smart contracts, let's not lose hope.

@nithin3476 Год назад

the attack is very basic when you learn hacks in solidity the first example will be there....

@EatTheBlocks Год назад

No. This is a complex re-entrancy attack spanning several functions, that leverage a very hard to find compiler bug.

@Calvrack Год назад

Perfect technology and knowledge field. All terrible mistakes would be payed in full by users how lack any ways to check or enforce security or have resources to monitor bugs and hacks. Crypto is doomed. In one month CURVE and Multichain. And there would be no end to this, this is all by design.

@ciaopizzabella Год назад

Don't despair. Most of the Curve money has already been returned. Multichain money will return too mostly.

@Calvrack Год назад

@@ciaopizzabella HAHAHA.... except for those who invested in CRV. As of multichain - it is a classic rug pull, responsible persons are hidden in china, stolen funds are already starting do dissolve from addresses. You can trust bitcoin because of years of codebase maturity. Also bitcoin codebase is not that big - it is possible to study it. Web3.0 is a centralized (because of central points of failure) and unreliable gimmick. I used to be a crypto fan myself. Not anymore. 300M of funds stolen in june alone.

@abdu1wahid105 Год назад

Proof of Jerk... BTC to zero... ETH worthless 😂 🤭