My Fishing App’s Tamper-Proof Ledger Failed Its First Real Audit
My fishing app gives points for verified catches. Points decide what you can see on the map. So the first question anyone sensible asks is: what stops the operator, me, from quietly editing the numbers?
The fashionable answer is a blockchain. I used thirteen lines of Python and a dozen lines of SQL instead.
Then, to write this article honestly, I built a verifier and pointed it at production. The hash chain passed. The token ledger passed. The points ledger failed in 21 places, and every one of them was in my own account.
This is the design, the audit, and the bug.
Why not a chain of blocks
World Fishing Map records a catch like this: you photograph the fish, an AI proposes the species, you confirm, and the server scores it. There are two balances. Fish Tokens reward a trustworthy catch. Angler's Points reward using the app, and...
Copyright of this story solely belongs to hackernoon.com. To see the full text click HERE
