Ethernaut: wargame to learn about smart contract security

https://ethernaut.zeppelin.solutions/

by elopio • 8 years ago

137 28 8 years ago

ethernaut.zeppelin.solutions

dep_b• 8 years ago

https://en.m.wikipedia.org/wiki/The_Eternaut

It’s not an association free name

davesque• 8 years ago

It's named after that comic. Images from the comic are littered all over the app.

DINKDINK2• 8 years ago

Before investing time in learning how to program on ethereum, one should first assess the engineering feasibility of it's blockchain:

https://medium.com/@preethikasireddy/how-does-ethereum-work-...

Take a look at their github and how the overwhelming majority of users can't run a full node (If you can't run a full node, you rely on an intermediary, you are not decentralized).

I'm not sure if the "marketing team behind a decentralized project" is still doing it but they used to be continuing to market ethereum as an immutable blockchain which is patently false due to their roll back of the DAO.

maiavictor3• 8 years ago

That's a blatant lie, running a full node is not required to "be decentralized", for the same reason you don't need to run a full node in Bitcoin. Light nodes have the same guarantees about the integrity and irreversibility that full nodes do. Perhaps you should try learning about them - see https://github.com/ethereum/wiki/wiki/Light-client-protocol - before stating things you don't understand? The fact that the worst thing a "fudster" like you has to say against Ethereum is that it had a hard fork to revert a millionaire hack caused by a bug in early stages of the project; whereas something not too different also happened to Bitcoin - see https://en.bitcoin.it/wiki/Value_overflow_incident - when it had the same age; says it all.

I don't often comment here, but I simply can't understand why an human being would come to the internet and hatefully attack things it doesn't like with straight made-up facts. I mean, I know this is so common, I just don't get why. This kind of thing makes me sad about humanity as a whole. Why can't we be nice to each other?

RustyRussell• 8 years ago

for the same reason you don't need to run a full node in Bitcoin.

Just to be clear: the Bitcoin developers do recommend you run a full node. It is the only way to independently validate the entire chain.

nadaviv2• 8 years ago

Light nodes have the same guarantees about the integrity and irreversibility that full nodes do.

This is not true. SPV nodes blindly follow the longest chain and are at the mercy of miners. Running a full node guarantees you that all the protocol rules are being followed to the letter, while an SPV node cannot verify chain validity rules (like the 21M coin limit) and could be fooled to accept payments with money made out of thin air.

Ethereum is that it had a hard fork to revert a millionaire hack caused by a bug in early stages of the project; whereas something not too different also happened to Bitcoin

The Bitcoin developers fixed a bug in the Bitcoin protocol. The Ethereum developers bailed-out a buggy smart contract written by a third-party, where the bug had nothing to do with the Ethereum protocol itself. I don't think the two are comparable.

Something that would've been comparable is the Bitcoin developers doing a chain-rollback to save the funds lost by MtGox. Which of course would be a horrible idea.

Also, when that happened in 2010, Bitcoin was a pet project valued at $0.08, with a total market cap of ~$250k. Ethereum was nearly a two-billion dollars project when they bailed out the DAO!

dang• 8 years ago

People think they're being nice when they're not. Your comment is also an example, which presumably is why it was flagged. Can you please be civil and respectful when commenting here, no matter how wrong another comment may be?

https://news.ycombinator.com/newsguidelines.html

the_clarence• 8 years ago

Go-ethereum is really hard to run. Constant problems that require you to reboot it. Not sure about the parity implementation.

asynchrony2• 8 years ago

It's perfectly decentralized.

The Ethereum Foundation is just the centralized marketing and governance organization that also lobbied the SEC not to classify it as a security because of how decentralized it is.

CryptoPunk5• 8 years ago

Multiple organizations argued that ether is not a security. No one has a monopoly on speaking for Ethereum. There once was a Bitcoin Foundation too.

CryptoPunk5• 8 years ago

I have no idea what you're talking about. Ethereum has over 12,000 full nodes: https://www.ethernodes.org/network/1

Ethereum's inclusion of state root commitments in its data structure also means ultra-secure light clients - that provide much greater security than Bitcoin's SPV clients - are possible.

What you're claiming amounts to blatant FUD.

trakout• 8 years ago

Geth isn't the only software out there..

alert0• 8 years ago

If you're interested in smart contract security, this repo [1] is a good resource too.

1. https://github.com/trailofbits/not-so-smart-contracts

nemild• 8 years ago

And more:

https://consensys.github.io/smart-contract-best-practices/

http://dasp.co

Disclaimer: I contributed to the first link.

Also, I wrote this a while back for any experienced engineers that want to learn Solidity:

https://learnxinyminutes.com/docs/solidity/

socrates1024• 8 years ago

Another related resource (seems similar to the design of ethernaut) https://github.com/pdaian/hackthiscontract

djrconcepts• 8 years ago

followed the instructions. was getting an error in the console when clicking the blue button "Get new instance". refreshed the page and tried again. worked after a few tries

splintercell• 8 years ago

I presume you had Metamask installed?

evanvanness• 8 years ago

The 21th century computing stack is being built.

Ethernaut: wargame to learn about smart contract security

Related Stories