CVE-2018–17144 caused me to realize BTC is not as secure as I thought. It was so close to happening, we might as well consider it to have happened.
What are the plans for if millions of BTC is stolen due to a bug? Would they roll back the blockchain, therefore invalidating every transaction that happened within the timeframe the stolen funds were moved? It seems to me like the original owners/hodlers should be the ones who are safe, and those who bought the stolen BTC should be the ones without a paddle, but is this decided upon?
I'm asking because I wonder if I should hold products for an hour or so after payment is confirmed. Maybe less? Big news like that should travel fast. There may be interest in an Oracle people can trust to tell them if a BTC emergency like this has happened. This way we could design systems to hold the product automatically upon the Oracle's say so.
[link] [comments]
No comments