1/ This one hurts.
I put weeks into the Solana Foundation audit contest on Code4rena and sth really sketchy went down
Which erased a top-6 finish and a potential 5-figure payout.
@9ightshade Nice one bruh. One lesson I'd share, whenever something works in Anchor, ask yourself "how would this work without Anchor?" That curiosity compounds fast on Solana.
The auditors who'll matter in 2 years aren't the smartest in the room today.
They're the ones still showing up after the room empties.
Be the last one out.
Condolences to Balancer, but the deeper issue is this...
You can’t build a safer ecosystem by assuming people will choose the moral path. In practice, the default path is often the immoral one, because doing harm is easier than doing good.
You can’t control human nature. You can control incentives.
And as long as the incentive to be a blackhat is greater than the incentive to be a whitehat, hacks like this will keep happening.
Protocols need to do more than say “do the right thing.” They need to make doing the "right thing" easier
We need faster triage, faster payouts, faster and clearer communication, and a better experience overall for whitehats.
Imho security is more of incentive design.