Patrick McCorry: Review Signer APIs After Binance Hack
Patrick McCorry cites the paper Programming Satan’s Computer to warn that signers must never act as oracles even if private keys remain safe, urging strict protocol definitions after the Binance hack.
SourceAnalysis
Patrick McCorry referenced the paper “Programming Satan’s Computer” to stress lessons from the Binance hack, noting that private keys can stay safe yet signers must never function as oracles. The software must block the signer from signing arbitrary messages sent to it, and the protocol must specify exactly what gets signed along with verification checks so any byte difference triggers an error. McCorry advised teams to audit their APIs and confirm what messages their signers will accept.
Patrick McCorry
@stonecoldpat0ethereum and L2 bull @arbitrum @lemniscap