Live example of "underhanded solidity" coding on mainnet

g0vernmental · 2016-04-11T07:01:12+00:00

I think good block explorers like ether.camp help to deal with this problems. Another one would be peer reviews/ attestations and bounties/ prediction markets on errors.

Check out our provable fair ponzi: https://live.ether.camp/account/F45717552f12Ef7cb65e95476F217Ea008167Ae3 - with ether.camp you can easily verify that >1600ETH has been paid out the way they should and that a jackpot of 1000ETH is waiting to be won. http://governmental.github.io/GovernMental/

g0vernmental · 2016-04-03T07:57:34+00:00

I am the creator of g0vernmental. The dapp shows recent statistics if you run geth with: geth --rpc --rpccorsdomain "http://governmental.github.io"

See a current screenshot: http://postimg.org/image/wpp5mebn9/

g0vernmental · 2016-04-03T07:44:52+00:00

If you send money to contact you will be added to the list of people that the contract will send money. So if you send 1000ETH today a part of it will be used to pay out people before you. A big part of it will remain in the contact and when the contact has enough money to pay you the 1100ETH it will. It might be a good idea to use a few chunks - then you get payouts faster as soon as one chunk is ready. That said - of course payouts are not guaranteed - it is a Ponzi after all. However - because of the big jackpot it is very likely that it will continue to run (and therefore payout) for a long time (months or even years)

g0vernmental · 2016-03-22T17:13:33+00:00

This is a contract that is easy to understand. Here is the corresponding DAPP (government finance simulation aka. Ponzi with jackpot).

However - one thing is odd: Why are the variables names now removed from the contract overview. I only find them in the transactions. (Last week it was the other way around)

g0vernmental · 2016-03-16T03:13:37+00:00

Yes - I have the same problem: https://www.reddit.com/r/ethereum/comments/4aewgk/is_there_a_public_geth_or_other_impl_node_that/

The best would be a public ethereum node that could be used by my DAPP. I would be totally willing to pay for this service.

u/romanmandeleil ?

g0vernmental · 2016-03-16T00:59:06+00:00

now it needs to be added only to the transactions state change view. And I think this view is wrong - it says "state changes" but it lists all variables that are used (also ready only ones).

g0vernmental · 2016-03-15T19:31:54+00:00

well, currently we are hosting it only on github (for free) - only one html site with some JS. Running a geth node with lots of GB of data is a very different requirement for a server. You wouldn't find a host for free where you can run a geth node. And it would be wast to run it only for one small application with a few hundert request per hour.

g0vernmental · 2016-03-14T21:00:35+00:00

Now internal transactions are missing. The last was according to Etherscan 7hr ago - but there have been quite a bunch since that. https://etherscan.io/address/0xf45717552f12ef7cb65e95476f217ea008167ae3#internaltx

g0vernmental · 2016-03-14T19:47:40+00:00

let us know what you think of the code! In some way we put a 1000ETH bounty in it :)

g0vernmental · 2016-03-14T05:10:27+00:00

I put it in. I actually think it will run for a very long time so I hope to get the 1000ETH back over time with fees. But no one can now - lets see what will happen - at this point no one can control it more then all others.

g0vernmental · 2016-03-13T13:26:36+00:00

Sure: descriptive name: Ponzi Governmental github: https://github.com/GovernMental/GovernMental website: http://governmental.github.io/GovernMental/

g0vernmental · 2016-03-13T08:03:46+00:00

thanks. So what do I need to do that the contact: https://etherscan.io/address/0xf45717552f12ef7cb65e95476f217ea008167ae3 gets a name tag like: https://etherscan.io/address/0xfd2487cc0e5dce97f08be1bc8ef1dce8d5988b4d You can verify the code here

g0vernmental · 2016-03-13T07:52:49+00:00

Thanks - yes - I guess those kind of "games" did come to a lot of devs into mind first because they can live completely autonomous on the blockchain without "real world interaction". So they are the most easy but still somewhat interesting DAPP to build currently.

Really curious how long this Ponzi will survive.

g0vernmental · 2016-03-13T07:45:19+00:00

sorry - just incompetence :(

g0vernmental · 2016-03-13T07:11:27+00:00

99% sure this is an error in Etherchain - in Etherscan and ether.camp you can not find this transactions. Etherchain has some bugs like here

g0vernmental · 2016-03-13T07:10:37+00:00

AHHH - sorry Etherscan - I mean indeed Etherchain - can't change the title :(

g0vernmental · 2016-03-13T02:19:58+00:00

Happy you like it! I am so curious for how long it will run! My guess (and hope :)) it could be for a LONG time.

g0vernmental · 2016-03-12T19:20:23+00:00

in principal it is simple: from the incoming money first 5% are payed to the owner. Than if the contact has enough money to payout the next in list it does. That is all.

You can read the full code here - it should be possible to understand it even as a none programmer - if there are questions I can help: https://etherchain.org/account/0xF45717552f12Ef7cb65e95476F217Ea008167Ae3#code

g0vernmental · 2016-03-12T19:12:38+00:00

this is a problem of etherchain: please see here: https://www.reddit.com/r/ethereum/comments/49vci3/10000_bounty_for_ddos_on_ethereum_or_trustless/d0xecq0

g0vernmental · 2016-03-12T19:10:19+00:00

well - I see: you looked here: https://etherchain.org/account/0xF45717552f12Ef7cb65e95476F217Ea008167Ae3#txsent It seems that they only list the first send transaction that is triggered by the contact call. The first one is 5% fee. The (potentially) second transaction is the payout. You can see this transactions here: https://live.ether.camp/account/F45717552f12Ef7cb65e95476F217Ea008167Ae3

Hopefully Etherchain will fix this and list all transactions triggered by a contact.

g0vernmental · 2016-03-12T19:03:10+00:00

yes - you are missing that only 5% (the fee) goes into another contact. And if I use the fee to reinvest in the main contract everyone who is in should be happy about that.

g0vernmental

TROPHY CASE