Not your wallet, not your coin, this is a srs currency stop laughing at me

  • treadful@lemmy.zip
    link
    fedilink
    English
    arrow-up
    19
    ·
    8 days ago

    The world’s largest crypto exchange said an initial investigation suggests “the security incident may involve a compromised DevOps engineer’s laptop, which allowed an attacker to gain access to a service container and submit unauthorized withdrawal transactions.”

    A single engineer for the largest crypto exchange in the world can move $6b in funds? Really?

    • megaman@discuss.tchncs.de
      link
      fedilink
      arrow-up
      5
      ·
      7 days ago

      That paragraph goes on to say

      However, Co-CEO Richard Teng later said the attack involved a more complex process rather than the misuse of a single engineer’s permissions.

    • psycotica0@lemmy.ca
      link
      fedilink
      arrow-up
      2
      ·
      7 days ago

      It could be the case that there is some “mega engineer” that is important enough to have access to enough credentials to be able to put this together. Probably you could build around any one person having access like that, but some combination of people need to have keys somewhere.

      But “DevOps Engineer” doesn’t sound like the person who should have access to the root pursestrings…

      • treadful@lemmy.zip
        link
        fedilink
        English
        arrow-up
        5
        ·
        7 days ago

        Nah. You build systems like this in a way you need multiple signers to move this level of funds. It’s absolute negligence that one operator could do this. Giving that level of control to a single person is asking for an attack like this.

        I say this as someone that’s worked on systems like these at a smaller scale.

  • melsaskca@lemmy.ca
    link
    fedilink
    arrow-up
    5
    ·
    7 days ago

    Thankfully I always thought that a forced new currency by nefarious tech bros would only appeal to the easy-money crowd, so I avoided it. Even in this bright new future we are still tricking people with that old reliable standard…snake oil.

  • Hapankaali@lemmy.world
    link
    fedilink
    arrow-up
    3
    ·
    7 days ago

    Merely gambling not enough? Now you can gamble while gambling on whether or not your casino still exists tomorrow and/or can cash out your chips.