Dayan: A 20-line Python script can easily profit off DEX inefficiencies
Phil Dayan · a16z Podcast | Voting, Security, and Governance in Blockchains and Cryptonetworks · Feb 26, 2019 · at 33:12
Phil Dayan, a Cornell Tech PhD student studying smart contract security, discusses early research into decentralized exchange (DEX) front-running vulnerabilities on the a16z Podcast.
0:00 / 0:09exact quote · 9.9s
▶ Watch the full episode on YouTube → 720p mp4 · rendered on demand · StarZero watermark
“You can just run this 20 line Python script and you can profit off of users in a way that was maybe not foreseen and is not sort of explicitly stated to them because of how inefficient these mechanisms are.”
quote is from the automated transcript, cleaned for reading: filler sounds and stutters are removed, nothing is rephrased. names can be misheard (the analysis reads context, assessments check outside sources). how →
More from Phil Dayan
Dayan: Dominant blockchains are economically incentivized to 51% attack smaller forks
“If you have a fork that's like 10% of the size of a project, and this fork could potentially impact the price of the larger project, it's absolutely in the interest of that larger project to launch attacks on that base layer proof of work vote and do things li…”
Dayan: Real-world governance mechanisms fail on-chain without assuming rational adversaries
“Your systems need to be strong even in the presence of economically motivated adversaries, and they need to be secure assuming people are rational rather than honest. So we don't get to lean on this sort of honesty that we have in the real world in blockchains…”
Dayan: Trusted hardware breaks all classical coercion-resistant voting schemes
“Trusted hardware, which is a new technology, Sort of breaks all classical coercion resistance voting schemes in the blockchain world and in the regular election world.”
Dayan: Dark DAO vote-buying attacks will become realistic nightmare scenarios at scale
“Blockchains today are a drop in the bucket of like the world financial system, and the incentives just aren't there yet. But if we are to use these technologies, and if we are to scale things, I think these are absolutely realistic scenarios and potentially ni…”
Dayan: Dark DAOs can bribe Proof-of-Stake validators to execute consensus attacks
“So what you can do with a dark DAO is start a staking pool where I say, like, you know, let me do my algorithmic trading and decide what order of transactions makes me the most money. You don't necessarily care if someone who's doing a transaction on a DEX get…”