Introduction

Trust – white hat hacker’s head of Smart contract auditing firm Trust Security – shed some light on strange feature of The smart contract that powers PayPal new stablecoin PYUSD.

In a recent tweet, Trust out They’ve seen a lot of Dipping on PayPal for using a ancient Hardness Translator.

Ancient Hardness Interpreter

Solidity Compiler Version 0.4.24

As pointed out in recent article, analysis of The smart contract revealed that the company used the Solidity compiler version 0.4.24.

Considering that version 0.4.24 of Solidity released on May 16, 2018 Available here, shows that version Chosen by PayPal was ancient indeed. However, this is not necessarily a file bad something.

Trust explained that when choosing the Solidity version, programmer looking for Compromise with the latest Versions that guarantee less gas use and more features. In contrast, older versions were tested for longer f feature Fewer unknowns.

In other words, older compilers are less likely to do so feature unknown vulnerabilities. Someone concluded may want to use Our oldest version She withstood it test of time.”

Simple and Strong

Moreover, confidence also pointing to out This is PayPal token Backed by a single short smart contract and the SafeMath library. This shallow complexity system does not require new features and with The goal is the ‘super-strong blade’ used for the next Over 10 years, not doing anything too fancy.”

trust also He explained it, “The simpler the code base and the fewer integrations with outside Code, the earlier you can set The translator version and get away with He. She.”

Plus, that is also in Line with Cyber security principle of attack Surface reduction – where programmers are looking to create a file system Simple and bare like possible to reduce Prospect of Hide vulnerabilities in Libraries and unnecessary complexity.

Immutable Smart Contracts

The Trust further highlighted that “immutable smart contracts are inherently different from traditional software. Because there is no periodicity patch days or emergency releases.” The only viable approach is “hope all components.” of The code base is secure at a certain point in time” and PayPal developers “He can be counted on now on five years of Translator test.