Software without an operator.
WHAT ONE IS
An application whose logic runs on a network rather than on a server.
WHAT IT TYPICALLY CONSISTS OF
Contracts holding logic and state An interface, usually hosted conventionally A wallet connection for user actions
WHAT IS ACTUALLY DECENTRALISED
The contracts, usually.
WHAT IS NOT
The interface, the domain name, and frequently the data indexing.
WHY THAT MATTERS
Users interact through the interface, and whoever controls it controls what users see.
WHAT ATTACKS EXPLOIT THAT
Compromised interfaces prompting malicious transactions.
WHAT REDUCES IT
Interfaces hosted on content-addressed storage Ability to interact with contracts directly
WHAT INDEXING SERVICES DO
Make ledger data queryable, which contracts cannot do efficiently.
WHY THAT MATTERS
Most applications depend on such a service, which is centralised.
WHAT USERS SHOULD VERIFY
The transaction they are signing, not the interface's description of it.
WHAT MAKES THAT DIFFICULT
Transaction contents are not readable to most users.
WHAT WALLETS INCREASINGLY PROVIDE
Simulation showing the outcome before signing.
WHAT TO USE
That, always, for unfamiliar applications.
WHAT TO ESTABLISH ABOUT ANY APPLICATION
Who can change the contracts, and what happens if the team disappears.