Quickly Build Landing Pages With Cloudy Move

Cloudy Move offers everything you need to build your custom web application. Create product inventory, send and receive payments. Sell your products and let your customers earn cashbacks and rewards. Choose any design templates, add and modify your contents and posts and be found everywhere. Sign up for free.

Without smarter governance, blockchains will fall victim to more attacks

3/25/2021 10:32:24 AM

Without smarter governance, blockchains will fall victim to more attacks

Once trust in blockchain is broken, it will be hard to get back. Image sourced from shutterstock.com
Benjamin Dean, Columbia University

Companies around the world are exploring blockchain, the technology underpinning digital currency bitcoin. In this Blockchain unleashed series, we investigate the many possible use cases for the blockchain, from the novel to the transformative.


Ethereum, a network designed to extend blockchain technology to uses beyond crypto-currencies, has been gaining traction around the world.

Billed as “a decentralized platform that runs smart contracts…without any possibility of downtime, censorship, fraud or third party interference,” Ethereum has been enthusiastically embraced by organisations like Microsoft, IBM and Azure.

How then does the equivalent of tens of millions of dollars get stolen in one day, from an individual account?

This is the situation that those affiliated with The DAO (Decentralized Autonomous Organization) awoke to on June 17 as transactions were made from their Ethereum account to an account whose owner is unknown.

It was a timely reminder that sometimes “smart” technology acts stupidly. Bitcoin suffered a near-death experience in 2014 when the equivalent of US$450 million in bitcoins went missing after Mt. Gox declared bankruptcy. Ethereum now faces a similar moment.

Important lessons about the risks, true capabilities and need for better governance of blockchain networks unfortunately have to be learned once again.

How Ethereum and The DAO work

Started in 2014 by teenage programming prodigy Vitalik Buterin, the Ethereum network is unique for its pioneering use of “smart contracts”. Just like regular contracts, terms and conditions are developed and agreed upon by consenting parties. What makes them supposedly “smart” is that, when the conditions of the contract are met, the contracts execute automatically.

The DAO is an online, investor-directed venture capital fund built on the Ethereum blockchain network. The DAO’s goal is to collectively channel investment into new projects, similar to the way that crowdfunding works, but using Ether, the crypto-currency that underpins Ethereum. It uses specialised code (based on Ethereum’s Solidity language) to allow its members to execute automated investment decisions.

The DAO has no single leader, though there is a group of overseers who are elected by holders of special DAO tokens (which people purchase with ether). Voting rights are determined by one’s DAO token holdings.

After raising 10.7 million ether (the equivalent of US$120 million in May 2016) in an initial crowdfunding effort, one of the biggest in history, hopes were high for The DAO.

Then, on June 17, crisis struck. An unknown person or group of people funnelled out about one-third of The DAO’s ether holdings the equivalent of between US$45 million and $77 million (the value depends on whether one uses the pre- or post-incident ether market price).

Within days, the market price of ether crashed around 50%. A good deal of soul searching for both projects has been underway ever since.

Smart thieves or dumb programming?

In the fallout of the incident, much was made about how The DAO was “hacked”. Upon closer examination though, The DAO was not hacked at all. The attacker(s) used two features of The DAO’s specialised code to siphon out ether in amounts small enough to not result in the destruction of their DAO tokens.

Moreover, The DAO’s terms and conditions do not permit theft or fraud. In short, it is perfectly legitimate to do whatever a smart contract’s code permits, even if this is beyond the original intention of those who wrote the code.

Like all technologies, “smart contracts” are dual use and might be used in ways that their creators did not intend. The complexity of the technology only compounds this issue.

When considered in this context, not only is what occurred above board (though not in the spirit of The DAO), funnelling money out of The DAO’s account ironically turns out to be a feature, not a bug.

Important decisions now face the Ethereum community. The fate of the network and the equivalent of hundreds of millions of dollars hang in the balance.

Sensibly, a backstop mechanism was built into the Ethereum network for incidents such as this one. The account holding the (mis)appropriated funds (a so-called Child DAO) has been frozen for 27 days and soon the Ethereum community will hold a referendum of sorts, “voting” on what course of action to pursue. This will determine whether holders of DAO tokens will be able to recoup their lost ether, or see it remained locked in limbo forever.

Lessons for blockchain enthusiasts

This episode introduces nuance to Ethereum’s pitch on enabling applications to run “without any possibility of downtime, censorship, fraud or third party interference”. Similar claims are made by the promoters of crypto-currencies and blockchains more generally.

Smart contracts may run exactly as programmed but this does not mean that they will run as the creators intended. The DAO incident demonstrates how the complexity of these contracts is outstripping the comprehension of the people who wish to write them. This in turn introduces bugs and vulnerabilities, some of which are known, but others will only become known when something goes wrong.

While the Ethereum network’s users might be decentralised, certain features of the network are not. For instance, the decision as to what changes will be made to the code as a part of the upcoming referendum is determined by a small group of Ethereum developers. The check on this concentration of control is that 51% of nodes in the network must agree to the changes.

However, a 51% threshold is not ideal given the network’s tendencies towards centralisation. The difference between the Ethereum blockchain network vs a referendum is that the former is not “one person, one vote” it is “one node, one vote”.

For Ethereum, there is no telling how many people control how many nodes. This is because the account holders are pseudonymous. What is known is that the distribution of ether holdings is heavily skewed across accounts. At present, of a total of 440,741 accounts, the top five Ethereum accounts alone possess 25% of the total outstanding ether. Moreover, the distribution of mining is also not uniform. Three mining pools currently occupy more than 50% of Ethereum’s mining capacity. Amassing 51% of the required resources for control becomes relatively easier under such a configuration. For Bitcoin, where votes are determined by the distribution of mining, and mining is similarly distributed, the ability to game the network is even greater.

Smart contracts require smarter governance

If blockchains are to be sustainable in the long run, serious consideration of appropriate governance mechanisms is needed.

A skewed distribution of mining power and crypto-currency holdings is combined with pseudonymity of account holders and a strong incentive to game the system. This has all the makings for deceptive, unaccountable, fraudulent, and self interested decision making.

Until hard questions around governance of blockchains are asked, and solutions implemented, we should brace ourselves for more incidents like that which has befallen The DAO. At stake is not just the fate of projects like Ethereum but the future potential of blockchain technology more generally.The Conversation

Benjamin Dean, Fellow for Cyber-security and Internet Governance, School of International and Public Affairs, Columbia University

This article is republished from The Conversation under a Creative Commons license. Read the original article.

Cloudy Move offers everything you need

Committed to grow your business like never before. We offer best digital consultancy services at affordable cost.

Create once. Share everywhere.

We tailor to your needs whatever they may be. Navigating your business online couldn’t get easier.

Unlimited devices

With us your business doesn't have to social distance online. Connect with people no matter where they are.

Beautiful templates & layouts

Not sure what you need? Scroll through our blog for advice, or send us a message!

Available globally

There are many options when it comes to using digital tools, and technology is always changing.

Link wallet to earn rewards

Earn 1000 DreamozTech tokens when you sign up, earn extra 500 on referral.

Create valuable SEO content.

Our SEO platform allows you to be creative, while still helping you boost your SEO ranking.

Trend online and let the spotlight be on you.

Our web tools are now at your fingertips. With our new mobile app manage your online business at the comfort of your phone.

Professional Digital Services For Business.

Search engines allow people to look for the product or service they want, at the precise time they want it.

Cloudy Move is more than just a page builder

Build your responsive, mobile friendly, dynamic and search engine optimized web apps. Update and manage your contents instantly. Bring more traffic, use our tools and thrive in the digital world. By creating your free profile, you are one step closer to get the best results. Our SEO platform allows you to be creative, while still helping you boost your SEO ranking.

Cloudy Move is more than just a page builder Cloudy Move is more than just a page builder Cloudy Move is more than just a page builder Cloudy Move is more than just a page builder

Cloudy Move offers everything you need

It's never been easier, cheaper or more beneficial for your business to get online. Don’t be intimidated by the breadth of opportunities in digital.

Personal

$59

per month
  • 1 user
  • 10 websites
  • Access to premium templates
  • Basic support
Start free trial

Agency

$159

per month
  • 2-15 users
  • 50 websites
  • Access to premium templates
  • Priority support
Start free trial

Enterprise

$499

per month
  • Unlimited users
  • Unlimited websites
  • Access to premium templates
  • 24/7 support
Start free trial

Everything is covered when it comes to using digital tools

Websites and social media can be used to reach existing and potential customers

  • Weekly new templates
  • Access to new features
  • Mail Chimp integration
  • Stripe integration
  • Payment integration
  • Advance SEO tools
  • Free unlimited support

Cloudy Move

Our content management platform lets you manage your custom web apps at an affordable price. Interested in posting a blog or advertising a product? Cloudy Move is more than just a page builder. You are one step closer to get the best results.

Frequently asked questions

Answers to most common questions

Can I try it for free?

By creating your free profile, you are one step closer to get the best results. Sign up now!

Do you have hidden fees?

No, Do you know the basic idea of price hike for various brands in shopping malls?

What are the payment methods you accept?

Internet banking and payment options. Compare prices with brand and see the difference.

How often do you release updates?

We provide you with solutions for making engaging web apps, help in mobile support and much more!

Not being in the office shouldn't make you feel invisible?

We can be the early bird you've always wanted to be without your alarm clock.

How can I contact you?

We would be glad to help you with your further queries.

Cloudy Move
Contact us

News from Cloudy Move

What's new at Cloudy Move

Color Switcher

These are just demo colors. You can easily create your own color scheme and templates.