1) Can you already rule out that the same (or similar) attack can be mounted again?
2) Can you already rule out conclusively that no lasting damage was done (as in: according to the pre-attack ownership situation)? Any chance that some subtle damage was done that'll be discovered only later?
I'll answer both at the same time. This particular attack can't be mounted again. We haven't pushed out the official fix yet, but exploit it requires growing the blocks sizes, which takes time. We'd never let that happen. The full fix will be out soon. This hole is plugged.
Any software can have vulnerabilities and exploits. This is exacerbated by the fact that we got the code from a bunch of lying scammers who despite that character flaw, happen to have some talent when it comes to cryptography and to a lesser extent coding. We are reviewing the code and paying qualified people to review the code in order to identify and correct problems to the greatest extent possible. Further we will be restructuring, refactoring, and/or replacing some of the code in order to further increase its robustness and trustworthiness (removing obfuscation for example).
I think you need to take a break. You are unintentionally saying stupid things.
This particular attack can't be mounted again.
Implies - so other attacks are still possible?
Any software can have vulnerabilities and exploits.
Implies - don't trust Monero with your anonymity just yet.
we got the code from a bunch of lying scammers who despite that character flaw, happen to have some talent when it comes to cryptography and to a lesser extent coding.
Where do you start with this statement.
Implies
- We didn't have the technical skill in the first place, so we are just using anything we could find
- Quality assurance in the code was never a priority
We are reviewing the code and paying qualified people to review the code in order to identify and correct problems
Implies - We haven't got a clue. So we are paying for temporary help.
Get some sleep. For investors, this sort of loose talk, from someone that is an established part of the team, gives zero confidence in the project.