Amusingly, Gun Sirer and others anticipated this just yesterday:<p><a href="http://hackingdistributed.com/2016/06/17/thoughts-on-the-dao-hack/" rel="nofollow">http://hackingdistributed.com/2016/06/17/thoughts-on-the-dao...</a><p><i>"What's a Hack When You Don't Have a Spec?<p>First of all, I'm not even sure that this qualifies as a hack. To label something as a hack or a bug or unwanted behavior, we need to have a specification of the wanted behavior.<p>We had no such specification for The DAO. There is no independent specification for what The DAO is supposed to implement. Heck, there are hardly any comments in The DAO code that document what the developers may have been thinking at the time they wrote the code.<p>The "code was its own documentation," as people say. It was its own fine print. The hacker read the fine print better than most, better than the developers themselves.<p>Had the attacker lost money by mistake, I am sure the devs would have had no difficulty appropriating his funds and saying "this is what happens in the brave new world of programmatic money flows." When he instead emptied out coins from The DAO, the only consistent response is to call it a job well done.</i>"