Replying to lucash.dev

Spent weeks studying the Stacks code base.

I wouldn’t put any money in there.

Tbf that’s not different from most projects I study — I hunt and report bugs for a living so I tend to focus on things that I think have issues or are broken.

On the other hand there’s basically no money in hunting bugs in most Bitcoin projects — yet there are few hacks or serious vulnerabilities. I spent a long time on the Bitcoin Core code base and a some early LN code few years ago and I’m still betting on these.
82
lucash.dev 2y ago

I never put money on stuff I’m actively investigating for bugs. I think it can cloud your judgement as you might start hoping not to find anything.

Never thought of getting any BTC before I had spent months studying the code, and gave up ever finding vulnerabilities there.

Many researchers take the opposite approach and focus on stuff the are invested in, as protecting their own stash can be a motivation.

I think that’s a bad idea.

Reply to this note

Please Login to reply.

Discussion

No replies yet.