zkSync 安全性：深入探討第 2 層擴充解決方案的保護機制

作為第 2 層擴展解決方案，zkSync 利用零知識匯總 (zk-Rollups) 來提高交易吞吐量並降低費用

zkSync, a Layer 2 scaling solution for Ethereum, is gaining attention for its potential to resolve the network's scalability problems. As a crypto token, zkSync's security is closely linked to its value and adoption in the market.

zkSync 是以太坊的第 2 層擴展解決方案，因其解決網路可擴展性問題的潛力而受到關注。作為一種加密代幣，zkSync 的安全性與其價值和市場採用度密切相關。

In this article, we will delve into the security aspects of zkSync, exploring its cryptographic proofs, on-chain data availability, decentralized validators, fraud proofs, and the role of zkSync in user interactions.

在本文中，我們將深入研究 zkSync 的安全性方面，探討其加密證明、鏈上資料可用性、去中心化驗證器、詐欺證明以及 zkSync 在使用者互動中的作用。

Understanding these aspects will provide valuable insights for both developers and users who rely on zkSync's capabilities.

了解這些方面將為依賴 zkSync 功能的開發人員和使用者提供寶貴的見解。

zkSync leverages zero-knowledge rollups (zk-Rollups) to enhance transaction throughput and reduce fees while maintaining robust security standards. zk-Rollups combine multiple transactions into a single batch, which is then processed off-chain by decentralized validators.

zkSync 利用零知識匯總 (zk-Rollups) 來提高交易吞吐量並降低費用，同時保持強大的安全標準。 zk-Rollups 將多個交易合併為一個批次，然後由去中心化驗證器進行鏈下處理。

Once the batch is complete, a cryptographic proof is generated and submitted to the Ethereum mainnet for verification. This approach significantly increases transaction capacity compared to processing each transaction individually on Layer 1.

批次完成後，將產生密碼證明並提交至以太坊主網進行驗證。與在第 1 層單獨處理每筆交易相比，這種方法顯著提高了交易容量。

At the heart of zkSync's security is the use of zk-SNARKs (Zero-Knowledge Succinct Non-Interactive Arguments of Knowledge). These cryptographic proofs provide a way to efficiently verify the correctness of a transaction batch without revealing any sensitive information, such as the individual transactions themselves.

zkSync 安全性的核心是 zk-SNARK（零知識簡潔非互動式知識論證）的使用。這些加密證明提供了一種有效驗證批量交易正確性的方法，而不會洩露任何敏感信息，例如各個交易本身。

When a batch of transactions is submitted to the Ethereum mainnet, along with a zk-SNARK proof, the proof can be used to demonstrate that all transactions within the batch are valid and untampered without disclosing any details about the transactions themselves.

當一批交易連同 zk-SNARK 證明一起提交到以太坊主網時，該證明可用於證明該批次中的所有交易都是有效且未被篡改的，而無需披露有關交易本身的任何詳細資訊。

This ensures the integrity of the transactions while maintaining privacy.

這確保了交易的完整性，同時也維護了隱私。

zkSync ensures data availability by storing critical data on the Ethereum mainnet. While transactions are processed off-chain in batches, the data necessary to reconstruct the state of the zkSync rollup is available on-chain.

zkSync 透過在以太坊主網上儲存關鍵資料來確保資料可用性。雖然交易是在鏈下批量處理的，但重建 zkSync 匯總狀態所需的資料在鏈上可用。

This approach mitigates the risk of data unavailability attacks, where users could potentially lose access to their funds if the off-chain data becomes inaccessible due to technical issues or malicious intent.

這種方法降低了資料不可用攻擊的風險，如果鏈下資料因技術問題或惡意意圖而變得無法訪問，使用者可能會失去對其資金的存取權限。

By storing the essential data on the Ethereum mainnet, even if the zkSync network experiences downtime or disruptions, users' funds and transaction history remain secure and recoverable once the network is back online.

透過將基本資料儲存在以太坊主網上，即使 zkSync 網路出現停機或中斷，一旦網路重新上線，用戶的資金和交易歷史記錄仍然安全且可恢復。

zkSync employs a network of decentralized validators to process and verify transactions. These validators are responsible for generating zk-SNARK proofs and submitting them to the Ethereum mainnet.

zkSync 採用去中心化驗證器網路來處理和驗證交易。這些驗證器負責產生 zk-SNARK 證明並將其提交到以太坊主網。

The decentralization of this process ensures that no single entity controls the validation mechanism, reducing the risk of collusion or malicious behavior.

此過程的去中心化確保沒有任何單一實體控制驗證機制，從而降低了共謀或惡意行為的風險。

Multiple validators independently generate and submit proofs, which are then checked by the Ethereum mainnet. If a faulty or fraudulent proof is detected, the respective validator can be penalized or slashed, while valid proofs are rewarded with transaction fees.

多個驗證器獨立產生並提交證明，然後由以太坊主網檢查。如果偵測到錯誤或欺詐性證明，相應的驗證者可能會受到懲罰或削減，而有效的證明將獲得交易費獎勵。

In addition to zk-SNARK proofs, zkSync also incorporates fraud proofs as an extra layer of security. In the event that an invalid transaction is included in a batch, a fraud-proof can be generated to challenge and invalidate the incorrect batch.

除了 zk-SNARK 證明之外，zkSync 還納入了詐欺證明作為額外的安全層。如果批次中包含無效交易，則可以產生防詐欺以質疑並使不正確的批次無效。

This mechanism adds an extra layer of protection against fraud or errors, ensuring that any suspicious or malicious transactions are detected and rectified.

該機制增加了一層額外的保護，防止詐欺或錯誤，確保偵測到並糾正任何可疑或惡意交易。

If an invalid batch is detected by a user or a monitoring entity, they can generate and submit a fraud-proof, which will trigger an investigation by the network validators.

如果使用者或監控實體偵測到無效批次，他們可以產生並提交防詐欺，這將觸發網路驗證器的調查。

Upon verifying the fraud-proof, the respective batch will be reverted, and the fraudulent transactions will be excluded from the zkSync state.

驗證防詐騙後，相應批次將被恢復，詐欺交易將從 zkSync 狀態中排除。

Users interact with zkSync through wallets that support zkSync transactions. These wallets must implement robust security practices to protect users' private keys and funds.

用戶透過支援 zkSync 交易的錢包與 zkSync 互動。這些錢包必須實施強大的安全實踐來保護用戶的私鑰和資金。

Popular wallets like MetaMask and Trust Wallet are compatible with the solution and provide secure interfaces for users to manage their assets on zkSync.

MetaMask 和 Trust Wallet 等流行錢包與此解決方案相容，並為用戶在 zkSync 上管理資產提供安全介面。

Moreover, the zkSync protocol relies on smart contracts deployed on the Ethereum mainnet. These smart contracts are audited and tested to ensure they are free from vulnerabilities.

此外，zkSync 協定依賴部署在以太坊主網路上的智慧合約。這些智能合約經過審核和測試，以確保它們不存在漏洞。

Regular audits by independent security firms help maintain the integrity and security of zkSync's smart contracts, providing users with confidence in the platform's reliability.

獨立安全公司的定期審核有助於維護 zkSync 智慧合約的完整性和安全性，讓使用者對平台的可靠性充滿信心。

zkSync is designed to be censorship-resistant, meaning that no single party can prevent transactions from being included in a batch. The decentralized nature of the validator network ensures that even if some validators attempt to censor transactions, for instance, by prioritizing specific transactions or delaying the inclusion of others, other validators can continue processing them.

zkSync 的設計具有抗審查性，這意味著任何一方都無法阻止交易被包含在批次中。驗證器網路的去中心化性質確保即使某些驗證器嘗試審查交易（例如，透過優先考慮特定交易或延遲包含其他交易），其他驗證器也可以繼續處理它們。

This decentralized structure maintains the system's overall functionality and prevents any single entity from controlling the flow of transactions.

這種去中心化的結構維護了系統的整體功能，並防止任何單一實體控制交易流程。

As long as a majority of the validators are acting honestly and efficiently, transactions will be included in batches and submitted to the Ethereum mainnet for verification.

只要大多數驗證者誠實且有效率地行事，交易就會被大量納入並提交到以太坊主網進行驗證。

A 51% attack occurs when a malicious entity gains control over the majority of the network's computational power. In the context of zkSync, the decentralized validator network makes it exceedingly difficult for any single entity to achieve such control.

當惡意實體獲得對網路大部分運算能力的控制時，就會發生 51% 攻擊。在 zkSync 的背景下，去中心化的驗證器網路使得任何單一實體都很難實現這種控制。

Moreover, zk-SNARK proofs provide an immutable record of transactions, making it

此外，zk-SNARK 證明提供了不可變的交易記錄，使其成為