Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Well perhaps but I read this article (http://vessenes.com/deconstructing-thedao-attack-a-brief-cod...) and it says:

"OK, here we go. _recipient.call.value()() is called without a gas amount. That is easily attackable with an attacking wallet."



Ah, that means the exact opposite ie "use as much gas as needed".

This is different from the default _recipient.send() which would be limited to 2300 gas




Consider applying for YC's Fall 2026 batch! Applications are open till July 27.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: