On: BitGrail lost $170M because only client-side validation was used

[seabird]

Hilariously enough, the only people to reliably not completely biff cryptocurrency service implementation have been illegal market sites. If they didn't plan to run off with the money in the first place, sites like these managed to operate for years at a time before (inevitably) being crushed by the long arm of the law. Talk about do-or-die code correctness and validation!

[kbenson → seabird]

When you absolutely can't go to the law for help, you make sure to cover your ass really well.

[theparanoid → seabird]

BitWasp has had security bugs.

[seabird → theparanoid]

I'm going to wager that very few (if any) illegal marketplaces trusted a codebase they didn't write entirely in-house, but that is just conjecture.