logoalt Hacker News

Quinner • yesterday at 5:25 PM • 8 replies • view on HN

They had controls in place to prevent large transfers, so the attackers structured it as a lot of small transfers very quickly


Replies

melenaboija • yesterday at 11:11 PM

Well, then they need another control that prevents “small transfers very quickly” happening, I guess.

➕ show 2 replies
yobananaboy • yesterday at 6:01 PM

Not just that! The EIP-7702 delegation to make the wallet into a smart contract bypassed all of the controls that they had in place on the signer. It's wild that they didn't have a system in place to stop it from signing that transaction type.

➕ show 1 reply
PeeMcGee • yesterday at 5:32 PM

A disgruntled employee wouldn't do the exact same thing?

➕ show 1 reply
burningChrome • yesterday at 7:24 PM

If they did and didn't account for a simple scenario like this happening and built in roadblocks and friction to prevent it from happening? Then it would stand to reason their entire EIS team should be fired.

The fact nobody thought of this is pretty staggering.

➕ show 1 reply
SpaceNoodled • yesterday at 6:56 PM

OK, so nobody else has seen Superman III?

➕ show 3 replies
stinkbeetle • yesterday at 10:51 PM

> They had controls in place to prevent large transfers, so the attackers structured it as a lot of small transfers very quickly

lol that's the worst control I've ever heard.

ForHackernews • yesterday at 5:30 PM

Be your own IRM 4.26.13!

long-time-first • yesterday at 5:30 PM

I think they did that in Superman 3

➕ show 1 reply