Watching the video, it's not really clear how this game is substantially different than a normal mobile game. What is the actual mechanism here for treating ADHD?
There is clear intellectual interest in comparing and contrasting why certain events receive outsized attention compared to objective outcomes (e.g. number of casualties).
I just want to add my $0.02 currently working at a games studio that is integrating AI generated art into our art pipelines.
Midjourney definitely generates really high quality art based on simple prompts, but the inability to really customize the output basically kills its utility.
We heavily use Stable Diffusion with specific models and ControlNet to get customizable and consistent results. Our artists also need to extensively tweak and post-process the output, and re-run it again in Stable Diffusion.
This entire workflow is definitely beyond a Discord-based interface to say the least.
Although smart contract audits are pretty much security theatre where the auditor charges $10k-$30k to run your code through a program, rug pulls are way more common just through simple methods.
A few common ways:
1. Use your admin privilege to withdraw or upgrade the smart contract to drain the funds
2. Withdraw all liquidity for your token and disappear
3. Sell the entire token supply all at once, which is functionally equivalent to (2)
4. Pretend to get "hacked" and lose your private key
5. Program a backdoor into the smart contract (the least common way). Some of these are economic in nature (e.g. frontrunning), which can't necessarily be found in an audit
Although a flashloan was used in this exploit, that's just a tool to leverage a fundamental flaw in the protocol. Flash loans clearly do more harm than good, so it's completely irresponsible for major DeFi platforms to still have this feature at this point.
The actual flaw is in Cream's oracle design for certain exotic long-tail assets. Basically, smart contracts need to get the price of an asset, and Cream was using the most naive way of simply calling the equivalent of asset.getPrice().
The reason this approach is critically unsafe is highlighted by this incident. A flashloan can alter price, borrow assets based on the new price, then return the price to normal before the transaction is finished.
This is not merely a coding bug but a basic design flaw that should have been caught by anyone with even a basic understanding of oracle design. It really reflects poorly on the competence of the entire DeFi space, considering CREAM is a pretty major protocol.