Smart contracts auditing companies like @trailofbits @ConsenSys Diligence or @OpenZeppelin should provide insurance services for smart contracts they are confident in.
Companies and users could pay x% per year to cover potential fund losses held or managed by some contracts.
-
-
Replying to @evan_van_ness @PhABCD and
Absolutely not. That's an extraordinary transfer of risk from the company who _owns_ the code to a 3rd party service provider. The product owner needs to take responsibility for the code they wrote, not try to transfer risk to anyone but themselves.
2 replies 0 retweets 5 likes -
Replying to @dguido @evan_van_ness and
Are you saying there is no profit to be made in the business of smart contract insurance?
1 reply 0 retweets 0 likes -
Replying to @PhABCD @evan_van_ness and
Dan Guido Retweeted Dan Guido
I said nothing about profit in my two replies.https://twitter.com/dguido/status/1182841047363264512 …
Dan Guido added,
Dan Guido @dguidoReplying to @dguido @evan_van_ness and 5 othersFurther, it creates a perverse incentive that harms the ability for a security firm to provide advice, making any relationship with such a firm adversarial and tainting the ability to communicate and freely report results. This is one of the community's worst ideas.1 reply 0 retweets 1 like -
Firms should hire
@trailofbits because I'll pledge to never gamble against my own clients or abuse insider information for personal profit. Users should know that our reports are never tainted by a personal profit motive. Avoid hiring anyone who won't do the same.1 reply 0 retweets 2 likes -
It's so extraordinarily unethical to be granted direct, unfettered access to a firm's engineering team, then turn around and gamble with that knowledge in a 3rd party betting pool. Think of the second order effects knowing that your security firm will start placing bets on you.
1 reply 0 retweets 2 likes -
Replying to @dguido @evan_van_ness and
I may be mistaking, but my assumption was that both security firms and insurance firms have a strong incentive for contracts to be secure. If a contract is insecure, the formers lose their reputation while the laters lose funds (to reimburse losses). Where is the misalignment?
2 replies 0 retweets 2 likes
I have my own business insurance policy to cover the legal and other risks, a $5m policy! I bear no responsibility for my client’s code. I have no control! I’m a consultant, not an engineer on their team. I can’t make decisions. I can only provide recommendations that help.
-
-
Meant to put this here: https://twitter.com/maurelian_/sta … appreciate your traditional Infosec perspective, and some of your points are valid, but you seem to not see some of the important ways this tech can change things.
0 replies 0 retweets 1 likeThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.