Re: CVE's for "smart" contracts, legal execution engines

[jericho <jericho@attrition.org>]

On Mon, 20 Jun 2016, Kurt Seifried wrote:

: So the main issues that need to be dealt with:
: 
: 1) Where do we draw the line on software/service for blockchain
: technologies?

Historically, the line has been drawn around the end-user software. So 
a 
vulnerability in the actual downloaded client qualifies for inclusion. 
A 
vulnerability in the 'math' behind the implementation is typically seen 
as 
a hybrid issue, or considered more a service offering. Issues in the 
algorithm or implementation that can be abused via the client software 
would fall under consumer software I believe, and warrant inclusion.