Top all-time · #4575
Zeppelin Blog
Company blog · blog.zeppelin.solutionsprogrammingstartups
Zeppelin Blog is the company blog at blog.zeppelin.solutions, writing about programming and startups. Since 2017, 16 different Hacker News readers have linked it 36 times, most often “Why I’m Building Zeppelin”. The last post was in 2018, but the archive is still widely read.
Too few sampled comments (7) to say how often HN recommends it.?
Why HN links it
Zeppelin's blog hosts a technical analysis of the Parity multi-sig wallet vulnerability. HN readers link it as the explanation of how the bug worked, including how delegatecall exposed the library's public functions.
Summarised by Claude from a sample of 7 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Growing and protecting the core infrastructure of an open, global economy, powered by blockchain technologies.
Most-linked posts?
- /on-the-parity-wallet-multisig-hack-405a8c12e8f75 people · 5 mentions · first linked 2017-07-20
- Why I’m Building Zeppelin2 people · 2 mentions · first linked 2018-12-28
- Deconstructing a Solidity Contract (series)2 people · 2 mentions · first linked 2018-08-14
- Thin Protocols2 people · 2 mentions · first linked 2017-10-05
- The Global Coordination Machine2 people · 2 mentions · first linked 2018-10-12
- Technical Details of zeppelinOS2 people · 2 mentions · first linked 2017-08-02
- Deconstructing a Solidity Contract – Part II: Creation vs. Runtime2 people · 2 mentions · first linked 2018-08-21
What Hacker News says?
This is the most useful explanation I've found about the vulnerability so far: https://blog.zeppelin.solutions/on-the-parity-wallet-multisi... The explanation is a bit scary about what actually ended up in parity code: The wallet contract forwards all unmatched function calls to the library using delegate call... This causes all public functions from the library to be callable by anyone, including initWallet, which…
Comment linking /on-the-parity-wallet-multisig-hack-405a8c12e8f7
on “153k Ether Stolen in Parity Multi-Sig Attack”Submitted ZeppelinOS: tools for smart contract applications as a story · 93 points
HN discussionThat's correct. Here is a more detailed explanation: https://blog.zeppelin.solutions/on-the-parity-wallet-multisi...
Comment linking /on-the-parity-wallet-multisig-hack-405a8c12e8f7
on “153k Ether Stolen in Parity Multi-Sig Attack”Submitted Augur REP Token Critical Vulnerability Disclosure as a story · 84 points
HN discussionLots of smart people in this space disagree with "fat protocols." I'll immodestly list my own first: https://www.evanvanness.com/post/166666272011/theres-no-such... See also CoinFund's Jake Brukhman: https://blog.coinfund.io/fat-protocols-are-not-an-investment... And Zeppelin's Teemu Paivinen: https://blog.zeppelin.solutions/thin-protocols-cc872258379f I hear that even Joel doesn't agree with how his piece has been…
Comment linking /thin-protocols-cc872258379f
on “Building for the Blockchain”Submitted Announcing OpenZeppelin 2.0 as a story · 16 points
HN discussionThis is a retelling of the Parity Multi-Sig Wallet hack, from the hackers perspective: https://blog.zeppelin.solutions/on-the-parity-wallet-multisi... We're talking about 40mn USD here so I doubt that this account was written by the original hacker.
Comment linking /on-the-parity-wallet-multisig-hack-405a8c12e8f7
on “How I snatched 153k Ether after a bad Tinder date”Submitted Getting started with OpenZeppelin-eth: a new stable and upgradeable EVM package as a story · 5 points
HN discussionThey've also shown an unwillingness to fork other hacks, such as the Parity one: https://blog.zeppelin.solutions/on-the-parity-wallet-multisi... I do understand that reverting is somewhat against fundamental blockchain ideals, but on the other hand – you could always just continue using Ethereum classic – if you're a more principled blockchain enthusiast. Also the use of the word "embarassing" makes me wonder if you…
Comment linking /on-the-parity-wallet-multisig-hack-405a8c12e8f7
on “Cloudflare's Ethereum Gateway”Submitted The Global Coordination Machine as a story · 4 points
HN discussionNot exactly clients, but the Parity multisig "hack"[0] was pretty wild. All it took was one permissionless call to permanently wipe the shared library of a large bunch of multisig wallets, thereby freezing those wallets forever. Some of the impacted people, including Parity, are still pushing for overriding the wallets to be unlocked, despite no support from anyone else. 0: https://blog.zeppelin.solutions/on-the-par…
Comment linking /on-the-parity-wallet-multisig-hack-405a8c12e8f7
on “Tor Browser disabled NoScript, but can't update”Submitted A Gentle Introduction to Ethereum Programming as a story · 3 points
HN discussionLast night after reading about the Parity Multi Sig attack I decided to finally try and read up on this subject, but quickly got annoyed with all the 'how bitcoin/blockchain works' videos that repeat the same high level points without scratching any of my technical itches. That was until I found this very concise gem of an introduction: http://www.imponderablethings.com/2013/07/how-bitcoin-works-... Via. https://blo…
Comment linking /the-hitchhikers-guide-to-smart-contracts-in-ethereum-848f08001f05
on “How does the Blockchain Work explained simply (2016)”Submitted MakerDAO Critical Vulnerability Notice as a story · 2 points
HN discussionSubmitted Bootstrapping a Developer Ecosystem with Zeppelin as a story · 2 points
HN discussionSubmitted Why I’m Building Zeppelin as a story · 2 points
HN discussionSubmitted Compliant Decentralization?: Exploring an Approach to Utility Token Distribution as a story · 2 points
HN discussionSubmitted Deconstructing a Solidity Contract (series) as a story · 2 points
HN discussionSubmitted New crowdsale contracts in OpenZeppelin as a story · 2 points
HN discussionSubmitted A Path Toward Better Token Sales as a story · 2 points
HN discussionSubmitted ZeppelinOS: tools for smart contract applications – Whitepaper as a story · 2 points
HN discussionSubmitted Technical Details of zeppelinOS as a story · 2 points
HN discussionSubmitted Introducing Coral: A Secure Platform for Token Sales as a story · 2 points
HN discussionSubmitted Technical Description of Critical Vulnerability in MakerDAO Governance as a story · 1 points
HN discussionSubmitted Follow This Quality Checklist Before an Audit as a story · 1 points
HN discussionSubmitted Why I’m Building Zeppelin as a story · 1 points
HN discussionSubmitted Solidity Compiler Audit as a story · 1 points
HN discussionSubmitted The Global Coordination Machine as a story · 1 points
HN discussionSubmitted Deconstructing a Solidity Contract – Part IV: Function Wrappers as a story · 1 points
HN discussionSubmitted Deconstructing a Solidity Contract – Part II: Creation vs. Runtime as a story · 1 points
HN discussion