âThe least evil.â
Thatâs how one ethereum user described the latest effort to recover $264 million in cryptocurrency lost due to a code fault in a popular ethereum wallet. But while the recovery efforts that have proliferated since the November incident have been so far shunned, a new effort, now documented in code, aims for a simpler and less invasive way to implement the fix.
Stepping back, in November, the code library associated with U.K. startup Parityâs multi-sig wallet was deleted by a pseudonymous hacker who âaccidentallyâ exploited a function called âself-destruct.â In the fallout, Parity proposed a modification to the ethereum software whereby the self-destruct mechanism would lose its functionality, but the proposal was found to contain significant security risks.
This new proposal, published on April 15 by Parity Technologies communications officer Afri Schoedon, suggests simply restoring the lost wallet library with a version of the code that does not contain a self-destruct function.
Users would be able to regain access to their funds, and on top of that, the new code would protect Parity from similar exploits going forward. As such, the new proposal sends a clear message â when it comes to fund recovery, some developers have no intention of giving up the fight.
âI think simply recovering funds is both more technically sound and more honest than the original proposal to modify the self-destruct opcode,â ethereum core developer Nick Johnson told CoinDesk.
And a number of others agree.
Co-founder of ethereum prediction protocol Augur, Joey Krug, told CoinDesk:
âI do believe it doesnât make sense to just have all this capital senselessly locked up.â
What seems to be different about this proposal is its limited reach.
Not only is it focused on the Parity software client only, but itâs also targeted specifically at only the 513,774.16 ether lost in the November hack. (This provides a contrast to past proposals, which have aimed at fund recovery broadly).
âSpeaking personally, Iâm in favor of helping people recover lost funds if the cost to do so is low relative to the funds being recovered, the owner is unambiguous, and the funds are definitively locked up,â Johnson said. âI think the case with the Parity multi-sig bug fits all three criteria.â
The other thing EIP-999 seems to have going for it is that itâs simple to execute. Instead of trying to rework the whole ethereum virtual machine, the proposal is specific to the frozen Parity wallets.
Schoedon noted that this would be easy to implement, pointing to the pull-request he already submitted to Parityâs code base. If accepted, other ethereum clients could simply follow suit.
And Krug, like others, believe this request might actually see enough community support to finally put an end to the Parity fund recovery debate.
Although for some, including Krug, the balance between protecting ethereum users and encouraging good security practices should be taken into account when deciding whether recoveries should happen.
âIn my opinion, proposals like these should be accepted provided the code was actually audited,â Krug said, adding:
âIf it wasnât, the community should be less forgiving.â
But with the broader debate over the recovery of funds due to code vulnerabilities splitting the community for years, some arenât so sure even EIP-999 will settle the mess.
âAllowing case-by-case proposals for mistake reversals is a terrible idea and opens up all kinds of concerns. This would set a terrible and dangerous precedent,â one user wrote on an ethereum forum.
This sentiment seems to be the current majority on social media and GitHub, where many are worried about future corruption and bribery.
Indeed, a Reddit user warned, âSome unknown amount of developer mindshare will leave ethereum if this happens.â
Wrapping up what he sees as the sentiment among the community, Johnson told CoinDesk, âIt seems plain to me based on an informal survey that a large proportion of the community is opposed to the idea. I think itâs unlikely this proposal will be implemented.â
Yet, the debates have brought about some sort of silver lining.
After EIP editor Yoichi Hirai stepped down from his role as a result of an eruption of criticism over the frozen fund recovery efforts, the EIP process was streamlined.
Still, Schoedon is aggravated by the opposition, telling CoinDesk:
âEven though I hear the feedback and apply changes to the new proposal, I get the feeling weâre running in circles here.â
Frozen ether coin image via Shutterstock