Comment

Comment by 5pl1n73r

Ah, blockchains, where people realize all those "it doesn't matter bugs" with 3 layers of indirection due to shaky primitives, actually matter. Other bugs like this could be used to execute arbitrary code on the computer that compiles the software, calling random "important looking" stuff into memory (xz backdoor style) to be decoded and executed by the backdoor. Of course, there will never be a day where you can compile untrusted code in Solidity.

> The lesson? Always test critical software under multiple compilers and library versions — especially when enabling a new language standard.

Don't have giga-complicated language jockey stuff backing software that can't afford to even have one bug.

parent 5pl1n73r 1 year ago

Discussion

Live from the official Hacker News API

A modern reader for Hacker News · SvelteKit + Skeleton