Smart contracts auditing companies like @trailofbits @ConsenSys Diligence or @OpenZeppelin should provide insurance services for smart contracts they are confident in.
Companies and users could pay x% per year to cover potential fund losses held or managed by some contracts.
-
-
Replying to @evan_van_ness @PhABCD and
Absolutely not. That's an extraordinary transfer of risk from the company who _owns_ the code to a 3rd party service provider. The product owner needs to take responsibility for the code they wrote, not try to transfer risk to anyone but themselves.
2 replies 0 retweets 5 likes -
Replying to @dguido @evan_van_ness and
Further, it creates a perverse incentive that harms the ability for a security firm to provide advice, making any relationship with such a firm adversarial and tainting the ability to communicate and freely report results. This is one of the community's worst ideas.
1 reply 0 retweets 1 like -
Replying to @dguido @evan_van_ness and
It still makes sense for auditors to partner with insurance companies serving end-consumers, not the projects. All the code is open source anyway. Chances are there's more money in this market.
1 reply 0 retweets 0 likes -
Replying to @gluk64 @evan_van_ness and
Insurance companies are free to read or request our reporting to base their decisions. The extra cash I could make in this unethical market would compromise my ability to serve my clients. Firms can buy their own insurance and should leave security vendors out as middlemen.
1 reply 0 retweets 1 like
Users are just as free to purchase their own policies for the funds they’ve risked by using smart contracts, and read or request our reporting all the same. It’s key that firms like mine remain independent and unencumbered by external profit motives.
-
-
I see value in being purely independent but I see more value in being strongly financially aligned. We all want the contracts to be as secure as possible.
0 replies 0 retweets 0 likesThanks. Twitter will use this to make your timeline better. UndoUndo
-
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.