cpncrunch
Joined 13 years ago
Karma
7,553
Submissions
3,181
Member since
Mar 22
You can email me at [email protected].
View on Hacker NewsJoined 13 years ago
On Ethereum, the attacker abused EIP-7702, a feature introduced in the 2025 Pectra upgrade that allows a regular wallet to delegate its behaviour to a smart contract.
So it sounds like a combination of factors and lack of safeguards led to this happening.
So, if that is correct then the problem was the 24h prior notice about the patches, which gave time for people to use AI to find the bugs.
However, that's very different from building and maintaining a product that will be used for live customers, where you have to consider security implications. This is what we're talking about here for Meta and Microsoft, and it's what I do for my actual coding job.
But even $200/month is worth shaving if it doesn't generate value.