Not directly related to Lisk but a very(!) interesting article about the DAO-hack and Ethereum in general (also listing some weaknesses of ETH):
Thoughts on The DAO Hack(...)
Is Ethereum/Solidity Suitable for Secure Smart Contracts?
It's clear that writing a robust, secure smart contract requires extreme amounts of diligence. It's more similar to writing code for a nuclear power reactor, than to writing loose web code.
Yet the current Solidity language and underlying EVM seems designed more for the latter. Some misfeatures are:
A good language for writing state machines would ensure that there are no states from which it is impossible to recover.
A good language for writing state machines would make it painfully clear when state transitions can and cannot happen.
A good language for maintaining state machines would provide features for upgrading the security of a live contract.
A good language for writing secure code would make it clear that there are no implicit actions, that code executes plainly, as read.
The current language does not fulfill any of these commandments, and in fact, the last one, involving implicit recursive calls, is what did The Dao in.
The SlockIt team even had the designer and implementor of Solidity perform a review of their code. If he cannot get something like The DAO to be secure, no one can.
A re-think seems called for.
(...)
http://hackingdistributed.com/2016/06/17/thoughts-on-the-dao-hack/Edit: Another major issue is this:
(...)
The only reason the proposal exists at all is because the Ethereum developers have personally invested in the DAO, multiple posters have argued.
The conflict threatens to bring down the credibility of the entire currency.
Not only was it possible to hack the system and move millions of dollars worth out of one of the currency's main backers – raising questions of its technical competence – but the developers have proposed intervening potentially for their own financial gain in the inner workings of the entire system – raising political questions over how it is run.http://m.theregister.co.uk/2016/06/17/digital_currency_ethereum/
