(IJCH) When are people going to stop blaming the platform instead of placing the blame where it belongs - the Smart Contract Developer? (or How EOS' Gambling App Hack sounds like Ethereum's DAO)
IJCH - Inside JaiChai's Head (Meaning: My Warped, Personal Opinions and Musings)
From the Author:
Salutations.
I am JaiChai.
And if I haven't had the pleasure of meeting you before, I'm delighted to make your acquaintance now.
I invite you to interact with everyone, learn, and have as much fun as possible!
For my returning online friends, "It's always great to see you again!"
When are people going to stop blaming the platform instead of placing the blame where it belongs - the Smart Contract Developer? (or How EOS' Gambling App Hack sounds like Ethereum's DAO)
Many people still blame Ethereum for the DAO Hack; when it actually was caused by the smart contract code - NOT Ethereum.
And as more and more smart contract platforms are appearing on the landscape, I think it's high time that the following fact should be remembered:
Although Smart Contract Platforms try to make their platforms as secure as possible, they are not responsible for the vulnerabilities in the coding, nor performance of the smart contracts developed by their customers.
The Platform is just that - a means of (or place for) deploying someone else's creation.
Even though the blame ultimately falls on the smart contract creator, much like Ethereum after the infamous DAO Hack, EOS' capability as a smart contract platform is being questioned.
In the following articles, the "Blame the Platform" sentiment is not stated outright, but insinuated.
"Another Smart Contract Hack? EOS Dice Game Pays Single User $600K Over 36-hour Period"
Article Link:
"Hacker exploits EOS smart contract to steal $200K from gambling app"
Article Link:
https://thenextweb.com/hardfork/2018/09/14/eos-gambling-app-hacked/
"Almost $240,000 Worth Of EOS Tokens Stolen In DApp Smart Contract Hack"
Article Link:
https://ethereumworldnews.com/almost-240000-worth-of-eos-tokens-stolen-in-dapp-smart-contract-hack/
The above articles portray the Gambling company (EOS Bet) as being forthright - "the good guy".
WTF?
Furthermore, the articles conveniently lack the obvious (at least to me, it is):
Someone at EOS Bet did not properly perform a smart contract audit - test and degug the code - before it went live!
Again, Ladies and Gentlemen, please remember this:
Although Smart Contract Platforms try to make their platforms as secure as possible, they are not responsible for the vulnerabilities in the coding, nor performance of the smart contracts developed by their customers.
The Platform is just that - a means of (or place for) deploying someone else's creation.
By JaiChai
Mighty Kind of You for stopping by.
Truly hope to see you again!
About the Author
Believing that school was too boring, he dropped out of High School early; only to earn an AA, BS and MBA in less than 4 years much later in life – while working full-time as a Navy/Marine Corps Medic.
In spite of a fear of heights and deep water, he performed high altitude, free-fall parachute jumps and hazardous diving ops in deep, open ocean water.
After 24 years of active duty, he retired in Asia.
Since then, he's been a full-time, single papa and actively pursuing his varied passions (Writing, Disruptive Technology, Computer Science and Cryptocurrency - plus more hobbies too boring or bizarre for most folk).
He lives on an island paradise with his teenage daughter, longtime girlfriend and three dogs.
"My mind was a terrible thing to waste..." - JaiChai