/tags/reentrancy/ Recent content in Reentrancy on truegav Hugo en-us Sun, 20 Jun 2021 14:00:00 +0530 /posts/reentrancy-six-years-after-dao/ Sun, 20 Jun 2021 14:00:00 +0530 /posts/reentrancy-six-years-after-dao/ <h2 id="the-beetle-that-will-outlive-you">The beetle that will outlive you</h2> <p>The DAO was drained for sixty million dollars on June 17, 2016. I have reviewed twelve contracts in the last six months. Every single one contained the exact same reentrancy bug. All twelve were audited. Some by firms whose LinkedIn profiles you might recognize.</p> <p>If a bug could win a Darwin Award for persistence, this bug would have a trophy case the size of a warehouse. It has survived every EIP. Every hard fork. Every static analysis tool. Every blog post titled &ldquo;How to Prevent Reentrancy Once and For All.&rdquo; It is the roach of the EVM. It was here before you learned Solidity and it will be here after you retire.</p>