Crypto Sleuth Ogle 提出以安全為中心的「膠水」區塊鏈

即將推出的 Layer-1 採用實際操作方法來確保專案安全。

Pseudonymous crypto sleuth Ogle has witnessed plenty of failures while investigating DeFi hacks. He’s part of a cottage industry of security experts who clean up the mess from attackers targeting crypto-finance projects almost daily. His specialty: tracking them down and getting the projects' money back.

化名加密貨幣偵探 Ogle 在調查 DeFi 駭客事件時目睹了許多失敗。他是安全專家家庭手工業的一員，他們幾乎每天都會清理針對加密金融計畫的攻擊者造成的混亂。他的專長是：追蹤他們並拿回專案資金。

Stopping these heists depends on good smart contract code and savvy security. In an interview with CoinDesk, Ogle said it’s also a game of incentives. If an attacker believes the personal cost of their exploit may be too high, they might decide against mounting it at all.

阻止這些搶劫取決於良好的智能合約代碼和精明的安全性。奧格爾接受 CoinDesk 採訪時表示，這也是一場激勵遊戲。如果攻擊者認為其利用的個人成本可能太高，他們可能會決定根本不安裝它。

That ethos is one of the pillars behind Ogle's upcoming blockchain, called Glue. It plans to fund a security blanket that raises the stakes for black hats and – hopefully – prompts them to take their heisting elsewhere.

這種精神是 Ogle 即將推出的名為 Glue 的區塊鏈背後的支柱之一。它計劃資助一條安全毯，提高黑帽的賭注，並希望促使他們在其他地方進行搶劫。

Glue has largely flown under the radar this year despite raising at a $1.4 billion valuation in a public token sale. It’s another newcomer layer 1 blockchain at a time when oodles of competitors are vying for the attention of crypto traders and developers.

儘管在公開代幣銷售中估值達到 14 億美元，但 Glue 今年基本上沒有受到關注。這是另一個新來者第一層區塊鏈，當時大量競爭對手正在爭奪加密貨幣交易者和開發人員的注意力。

Ogle's entrant doesn't have the name-brand appeal of buzzy platforms like Monad and Berachain, two other yet-to-launch blockchain platforms. Instead, it deployed guerilla marketing tactics (like handing out Spy-style manilla envelopes at industry conferences) to stoke intrigue.

Ogle 的進入者不具備 Monad 和 Berachain（另外兩個尚未推出的區塊鏈平台）等熱門平台的品牌吸引力。相反，它採取了遊擊行銷策略（例如在行業會議上分發間諜風格的馬尼拉信封）來煽動陰謀。

In interviews with CoinDesk Ogle and co-founder SnapShot outlined Glue's philosophy, security and design. They believe it can appeal to "regular people who don't do crypto all day long" as well as traditional financial professionals "who can't come onto a platform where they think they're going to be rugged."

在接受 CoinDesk 採訪時，Ogle 和 SnapShot 聯合創始人概述了 Glue 的理念、安全性和設計。他們相信它可以吸引「不整天從事加密貨幣的普通人」以及「無法進入他們認為自己會很堅固的平台」的傳統金融專業人士。

Hub security

樞紐安全

"We want to build something that actually has a chance of competing with the banks," said Glue co-founder Snapshot.

Glue 聯合創始人 Snapshot 表示：“我們希望打造一款真正有機會與銀行競爭的產品。”

Glue will be built around an activity "hub" that aggregates DeFi services for chain users. That level of curation makes Glue markedly different from the construction of most other blockchains. Usually, their users must find what they're looking for themselves.

Glue 將圍繞一個活動「中心」構建，為鏈上用戶聚合 DeFi 服務。這種管理水準使得 Glue 與大多數其他區塊鏈的建構明顯不同。通常，他們的用戶必須自己找到他們想要的東西。

"‘Centralization' is a dirty word in crypto for a good reason but from a UX perspective I think we can have a much more central interface," SnapShot said. Ogle said Glue Hub will make on-chain onboarding smooth – "almost like Coinbase."

「『集中化』在加密領域是一個骯髒的詞，這是有充分理由的，但從用戶體驗的角度來看，我認為我們可以擁有一個更集中的介面，」SnapShot 說。 Ogle 表示，Glue Hub 將使鏈上上線變得順利——「幾乎就像 Coinbase 一樣」。

The approach targets the 90% of crypto users who SnapShot said stick to centralized exchanges, rather than the "one million – basically no one" that he said operate on-chain.

該方法針對的是 SnapShot 所說的堅持中心化交易所的 90% 的加密貨幣用戶，而不是他所說的在鏈上操作的「一百萬——基本上沒有人」。

Glue Hub won't be the only place where users can trade. The chain is permissionless, meaning anyone can build and launch anything for anyone to use. These creations could be integrated with Glue Hub if they pass security checks like audits commissioned by Glue.

Glue Hub 不會是用戶可以交易的唯一地方。該鍊是無需許可的，這意味著任何人都可以建立和啟動任何東西供任何人使用。如果這些作品通過了 Glue 委託的審計等安全檢查，則可以與 Glue Hub 整合。

Audits have emerged in crypto as a kind of marketing tool in their own right. Projects commission reports from chain-checking specialists who scour their smart contracts to squash money-losing bugs. These checks aren't definitive – plenty of audited projects still get exploited – but projects tout their clean bills of health as stamps of approval.

審計本身已成為加密貨幣中的一種行銷工具。專案委託來自鏈檢查專家的報告，他們仔細檢查他們的智能合約以消除虧損的錯誤。這些檢查並不是確定的——許多經過審計的項目仍然被利用——但該項目將其乾淨的健康證明作為批准的標誌。

That practice has gone too far, according to Ogle, who said he used to run an auditing firm. Many projects are only willing to be transparent about good-looking reports, and opt to bury the bad, he said.

奧格爾說，這種做法太過分了，他說他曾經經營過一家審計公司。他說，許多項目只願意對好看的報告保持透明，而選擇掩蓋不好的報告。

"That's not good for security, for the cryptosphere itself," he said.

「這對安全性、對加密領域本身都不利，」他說。

In place of this Ogle said high-caliber projects on Glue could be subjected to audits funded by the chain via the Glue Security Fund. This fund will get its money from a tiny tax applied to every transaction, the founders said. It will pay for various efforts to promote security across the entire chain.

Ogle 表示，Glue 上的高水準計畫可以接受該鏈透過 Glue 安全基金資助的審計。創辦人表示，該基金將從對每筆交易徵收的少量稅中獲得資金。它將付出各種努力來促進整個鏈條的安全。

Audits don't always work. Lending protocol Euler lost $200 million to a hack that slipped past 10 audits in two years. Ogle participated in Euler's recovery as part of the war room that tracked down the hacker and negotiated the return of that money. Ogle claims he has a 65% success rate in getting money back for the 40-odd exploited projects he's assisted.

審計並不總是有效。借貸協議 Euler 因駭客攻擊而損失了 2 億美元，該駭客在兩年內未通過 10 次審計。奧格爾作為作戰室的一部分參與了歐拉的恢復，追蹤駭客並協商返還這筆錢。奧格爾聲稱，他協助的 40 多個被開發案的退款成功率為 65%。

"We have actual funds set aside for me and a group of people to go and chase down anyone who does bad things on" Glue, Ogle said. He later added that any security service (be they vigilante detectives, auditors or analytics compliance tools) will be able to apply for grants from the GSF. Holders of Glue's token will determine what's funded, he said.

奧格爾說：“我們為我和一群人預留了實際資金，用於追捕任何在膠水上做壞事的人。”他後來補充說，任何安全服務（無論是治安偵探、審計員還是分析合規工具）都可以向 GSF 申請撥款。他說，Glue 代幣的持有者將決定資助的內容。

The idea with GSF is to disincentivize hackers from trying to attack Glue projects in the first place. They won't be able to catch everybody, Ogle said. But if would-be hackers are comparison-shopping targets, they might think twice about hitting the mark that has a war chest ready to pay for chasing them down.

GSF 的想法是首先阻止駭客嘗試攻擊 Glue 專案。奧格爾說，他們不可能抓住所有人。但如果潛在的駭客是比較購物的目標，他們可能會三思而後行，是否要達到有足夠資金來追捕他們的目標。

Transactions on Glue will be multi-sig, meaning any attempt to move money from wallets will require multiple approvals from the user. Ogle said this

Glue 上的交易將是多重簽署的，這意味著任何從錢包中轉移資金的嘗試都需要用戶的多次批准。奧格爾這樣說