Augur Bets on Ethereum Constantinople Delay After Another Bug Found

27w
4m read
Summary

The Constantinople upgrade, however, is set to go live on the 27th of February. That will surely lag behind the Constantinople upgrade itself,” Carver says. A new bug in ethereum’s Constantinople upgrade has been found at the last minute, with it affecting a limited number of smart contracts that utilize self-destruct. He further added: “I am now thinking of the temporal replay protection EIP suggested in State fees proposal 2. So there is time to delay Constantinople to the end of March with bearable inconvenience.

Article Preview

A new bug in ethereum’s Constantinople upgrade has been found at the last minute, with it affecting a limited number of smart contracts that utilize self-destruct.

Jason Carver, a developer at the Ethereum Foundation (EF), says a new feature called Create2 can allow a developer to replace the self-destructed contract and thus change the rules. Carver said:

“You can construct a pretty innocuous contract pre-Constantinople, one that has two possible outcomes from a transaction: {‘contract exists’: ‘swap tokens’, ‘contract self-destructs’: ‘waste some gas’}. Post-Constantinople, the options could now become {‘contract exists’: ‘swap tokens’, ‘contract self-destructs’: ‘waste some gas’, ‘contract replaced’: ‘all ERC20 tokens that were pre-approved to the contract are stolen’}…

Sending ether isn’t the only way to get hosed. For example you might use ERC20’s ‘approve’ on a contract, seeing that the contract has certain...

Read the full article @ TrustNodes