The New Last-Ditch Effort to Unfreeze a $260 Million Ethereum Fortune

A new proposal for unfreezing millions in ether is easier to swallow since it's focused specifically on Parity, but it's still causing a stir.

AccessTimeIconApr 18, 2018 at 4:00 a.m. UTC
Updated Aug 18, 2021 at 8:50 p.m. UTC

Presented By Icon

Election 2024 coverage presented by

Stand with crypto

"The least evil."

That's how one ethereum user described the latest effort to recover $264 million in cryptocurrency lost due to a code fault in a popular ethereum wallet. But while the recovery efforts that have proliferated since the November incident have been so far shunned, a new effort, now documented in code, aims for a simpler and less invasive way to implement the fix.

  • Bitcoin Mining in the U.S. Will Become 'a Lot More Decentralized': Core Scientific CEO
    13:18
    Bitcoin Mining in the U.S. Will Become 'a Lot More Decentralized': Core Scientific CEO
  • Binance to Discontinue Its Nigerian Naira Services After Government Scrutiny
    05:10
    Binance to Discontinue Its Nigerian Naira Services After Government Scrutiny
  • The first video of the year 2024
    04:07
    The first video of the year 2024
  • The last regression video of the year 3.67.0
    40:07
    The last regression video of the year 3.67.0
  • Stepping back, in November, the code library associated with U.K. startup Parity's multi-sig wallet was deleted by a pseudonymous hacker who "accidentally" exploited a function called “self-destruct." In the fallout, Parity proposed a modification to the ethereum software whereby the self-destruct mechanism would lose its functionality, but the proposal was found to contain significant security risks.

    This new proposal, published on April 15 by Parity Technologies communications officer Afri Schoedon, suggests simply restoring the lost wallet library with a version of the code that does not contain a self-destruct function.

    Users would be able to regain access to their funds, and on top of that, the new code would protect Parity from similar exploits going forward. As such, the new proposal sends a clear message - when it comes to fund recovery, some developers have no intention of giving up the fight.

    “I think simply recovering funds is both more technically sound and more honest than the original proposal to modify the self-destruct opcode,” ethereum core developer Nick Johnson told CoinDesk.

    And a number of others agree.

    Co-founder of ethereum prediction protocol Augur, Joey Krug, told CoinDesk:

    “I do believe it doesn’t make sense to just have all this capital senselessly locked up."

    Case-specific recovery

    What seems to be different about this proposal is its limited reach.

    Not only is it focused on the Parity software client only, but it's also targeted specifically at only the 513,774.16 ether lost in the November hack. (This provides a contrast to past proposals, which have aimed at fund recovery broadly).

    “Speaking personally, I'm in favor of helping people recover lost funds if the cost to do so is low relative to the funds being recovered, the owner is unambiguous, and the funds are definitively locked up,” Johnson said. “I think the case with the Parity multi-sig bug fits all three criteria.”

    The other thing EIP-999 seems to have going for it is that it's simple to execute. Instead of trying to rework the whole ethereum virtual machine, the proposal is specific to the frozen Parity wallets.

    Schoedon noted that this would be easy to implement, pointing to the pull-request he already submitted to Parity's code base. If accepted, other ethereum clients could simply follow suit.

    And Krug, like others, believe this request might actually see enough community support to finally put an end to the Parity fund recovery debate.

    Although for some, including Krug, the balance between protecting ethereum users and encouraging good security practices should be taken into account when deciding whether recoveries should happen.

    “In my opinion, proposals like these should be accepted provided the code was actually audited,” Krug said, adding:

    "If it wasn’t, the community should be less forgiving.”

    Debate continues

    But with the broader debate over the recovery of funds due to code vulnerabilities splitting the community for years, some aren't so sure even EIP-999 will settle the mess.

    “Allowing case-by-case proposals for mistake reversals is a terrible idea and opens up all kinds of concerns. This would set a terrible and dangerous precedent,” one user wrote on an ethereum forum.

    This sentiment seems to be the current majority on social media and GitHub, where many are worried about future corruption and bribery.

    Indeed, a Reddit user warned, "Some unknown amount of developer mindshare will leave ethereum if this happens.”

    Wrapping up what he sees as the sentiment among the community, Johnson told CoinDesk, “It seems plain to me based on an informal survey that a large proportion of the community is opposed to the idea. I think it's unlikely this proposal will be implemented."

    Yet, the debates have brought about some sort of silver lining.

    After EIP editor Yoichi Hirai stepped down from his role as a result of an eruption of criticism over the frozen fund recovery efforts, the EIP process was streamlined.

    Still, Schoedon is aggravated by the opposition, telling CoinDesk:

    “Even though I hear the feedback and apply changes to the new proposal, I get the feeling we’re running in circles here.”

    Frozen ether coin image via Shutterstock

    Disclosure

    Please note that our privacy policy, terms of use, cookies, and do not sell my personal information have been updated.

    CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. CoinDesk has adopted a set of principles aimed at ensuring the integrity, editorial independence and freedom from bias of its publications. CoinDesk is part of the Bullish group, which owns and invests in digital asset businesses and digital assets. CoinDesk employees, including journalists, may receive Bullish group equity-based compensation. Bullish was incubated by technology investor Block.one.


    Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.