A Hacker Tried to Steal $566M by Exploiting a Code Smell, Here's How

One of the larger blockchains had to be halted yesterday, 2022 Oct 7th. Hackers exploited a bug in the way that the Binance Bridge verified proofs which could have allowed attackers to forge arbitrary messages. Some of the code used in blockchains will be unacceptable in many large mission-critical systems and codebases. A clean code lesson should be: Use (fast) hash for fast discard, and use (slow) equality to ensure you are right. The beautiful image as the cover is …

clean-code code cybersecurity data analysis debugging hacker hashing refactoring security web-monetization