The New Last-Ditch Effort to Unfreeze a $260 Million Ethereum Fortune

A new proposal for unfreezing millions in ether is easier to swallow since it's focused specifically on Parity, but it's still causing a stir.

AccessTimeIconApr 18, 2018 at 4:00 a.m. UTC
Updated Sep 13, 2021 at 7:50 a.m. UTC
10 Years of Decentralizing the Future
May 29-31, 2024 - Austin, TexasThe biggest and most established global hub for everything crypto, blockchain and Web3.Register Now

"The least evil."

That's how one ethereum user described the latest effort to recover $264 million in cryptocurrency lost due to a code fault in a popular ethereum wallet. But while the recovery efforts that have proliferated since the November incident have been so far shunned, a new effort, now documented in code, aims for a simpler and less invasive way to implement the fix.

Stepping back, in November, the code library associated with U.K. startup Parity's multi-sig wallet was deleted by a pseudonymous hacker who "accidentally" exploited a function called “self-destruct." In the fallout, Parity proposed a modification to the ethereum software whereby the self-destruct mechanism would lose its functionality, but the proposal was found to contain significant security risks.

This new proposal, published on April 15 by Parity Technologies communications officer Afri Schoedon, suggests simply restoring the lost wallet library with a version of the code that does not contain a self-destruct function.

Users would be able to regain access to their funds, and on top of that, the new code would protect Parity from similar exploits going forward. As such, the new proposal sends a clear message - when it comes to fund recovery, some developers have no intention of giving up the fight.

“I think simply recovering funds is both more technically sound and more honest than the original proposal to modify the self-destruct opcode,” ethereum core developer Nick Johnson told CoinDesk.

And a number of others agree.

Co-founder of ethereum prediction protocol Augur, Joey Krug, told CoinDesk:

“I do believe it doesn’t make sense to just have all this capital senselessly locked up."

Case-specific recovery

What seems to be different about this proposal is its limited reach.

Not only is it focused on the Parity software client only, but it's also targeted specifically at only the 513,774.16 ether lost in the November hack. (This provides a contrast to past proposals, which have aimed at fund recovery broadly).

“Speaking personally, I'm in favor of helping people recover lost funds if the cost to do so is low relative to the funds being recovered, the owner is unambiguous, and the funds are definitively locked up,” Johnson said. “I think the case with the Parity multi-sig bug fits all three criteria.”

The other thing EIP-999 seems to have going for it is that it's simple to execute. Instead of trying to rework the whole ethereum virtual machine, the proposal is specific to the frozen Parity wallets.

Schoedon noted that this would be easy to implement, pointing to the pull-request he already submitted to Parity's code base. If accepted, other ethereum clients could simply follow suit.

And Krug, like others, believe this request might actually see enough community support to finally put an end to the Parity fund recovery debate.

Although for some, including Krug, the balance between protecting ethereum users and encouraging good security practices should be taken into account when deciding whether recoveries should happen.

“In my opinion, proposals like these should be accepted provided the code was actually audited,” Krug said, adding:

"If it wasn’t, the community should be less forgiving.”

Debate continues

But with the broader debate over the recovery of funds due to code vulnerabilities splitting the community for years, some aren't so sure even EIP-999 will settle the mess.

“Allowing case-by-case proposals for mistake reversals is a terrible idea and opens up all kinds of concerns. This would set a terrible and dangerous precedent,” one user wrote on an ethereum forum.

This sentiment seems to be the current majority on social media and GitHub, where many are worried about future corruption and bribery.

Indeed, a Reddit user warned, "Some unknown amount of developer mindshare will leave ethereum if this happens.”

Wrapping up what he sees as the sentiment among the community, Johnson told CoinDesk, “It seems plain to me based on an informal survey that a large proportion of the community is opposed to the idea. I think it's unlikely this proposal will be implemented."

Yet, the debates have brought about some sort of silver lining.

After EIP editor Yoichi Hirai stepped down from his role as a result of an eruption of criticism over the frozen fund recovery efforts, the EIP process was streamlined.

Still, Schoedon is aggravated by the opposition, telling CoinDesk:

“Even though I hear the feedback and apply changes to the new proposal, I get the feeling we’re running in circles here.”

Frozen ether coin image via Shutterstock

Disclosure

Please note that our privacy policy, terms of use, cookies, and do not sell my personal information has been updated.

The leader in news and information on cryptocurrency, digital assets and the future of money, CoinDesk is an award-winning media outlet that strives for the highest journalistic standards and abides by a strict set of editorial policies. In November 2023, CoinDesk was acquired by Bullish group, owner of Bullish, a regulated, institutional digital assets exchange. Bullish group is majority owned by Block.one; both groups have interests in a variety of blockchain and digital asset businesses and significant holdings of digital assets, including bitcoin. CoinDesk operates as an independent subsidiary, and an editorial committee, chaired by a former editor-in-chief of The Wall Street Journal, is being formed to support journalistic integrity.


Learn more about Consensus 2024, CoinDesk's longest-running and most influential event that brings together all sides of crypto, blockchain and Web3. Head to consensus.coindesk.com to register and buy your pass now.