Crypto Sleuth Ogle 提出以安全为中心的“胶水”区块链

即将推出的 Layer-1 采用实际操作方法来确保项目安全。

Pseudonymous crypto sleuth Ogle has witnessed plenty of failures while investigating DeFi hacks. He’s part of a cottage industry of security experts who clean up the mess from attackers targeting crypto-finance projects almost daily. His specialty: tracking them down and getting the projects' money back.

化名加密货币侦探 Ogle 在调查 DeFi 黑客事件时目睹了许多失败。他是安全专家家庭手工业的一员，他们几乎每天都会清理针对加密金融项目的攻击者造成的混乱。他的专长是：追踪他们并拿回项目资金。

Stopping these heists depends on good smart contract code and savvy security. In an interview with CoinDesk, Ogle said it’s also a game of incentives. If an attacker believes the personal cost of their exploit may be too high, they might decide against mounting it at all.

阻止这些抢劫取决于良好的智能合约代码和精明的安全性。奥格尔在接受 CoinDesk 采访时表示，这也是一场激励游戏。如果攻击者认为其利用的个人成本可能太高，他们可能会决定根本不安装它。

That ethos is one of the pillars behind Ogle's upcoming blockchain, called Glue. It plans to fund a security blanket that raises the stakes for black hats and – hopefully – prompts them to take their heisting elsewhere.

这种精神是 Ogle 即将推出的名为 Glue 的区块链背后的支柱之一。它计划资助一条安全毯，提高黑帽子的赌注，并希望促使他们在其他地方进行抢劫。

Glue has largely flown under the radar this year despite raising at a $1.4 billion valuation in a public token sale. It’s another newcomer layer 1 blockchain at a time when oodles of competitors are vying for the attention of crypto traders and developers.

尽管在公开代币销售中估值达到 14 亿美元，但 Glue 今年基本上没有受到关注。这是另一个新来者第一层区块链，当时大量竞争对手正在争夺加密货币交易者和开发人员的注意力。

Ogle's entrant doesn't have the name-brand appeal of buzzy platforms like Monad and Berachain, two other yet-to-launch blockchain platforms. Instead, it deployed guerilla marketing tactics (like handing out Spy-style manilla envelopes at industry conferences) to stoke intrigue.

Ogle 的进入者不具备 Monad 和 Berachain（另外两个尚未推出的区块链平台）等热门平台的品牌吸引力。相反，它采取了游击营销策略（例如在行业会议上分发间谍风格的马尼拉信封）来煽动阴谋。

In interviews with CoinDesk Ogle and co-founder SnapShot outlined Glue's philosophy, security and design. They believe it can appeal to "regular people who don't do crypto all day long" as well as traditional financial professionals "who can't come onto a platform where they think they're going to be rugged."

在接受 CoinDesk 采访时，Ogle 和 SnapShot 联合创始人概述了 Glue 的理念、安全性和设计。他们相信它可以吸引“不整天从事加密货币的普通人”以及“无法进入他们认为自己会很坚固的平台”的传统金融专业人士。

Hub security

枢纽安全

"We want to build something that actually has a chance of competing with the banks," said Glue co-founder Snapshot.

Glue 联合创始人 Snapshot 表示：“我们希望打造一款真正有机会与银行竞争的产品。”

Glue will be built around an activity "hub" that aggregates DeFi services for chain users. That level of curation makes Glue markedly different from the construction of most other blockchains. Usually, their users must find what they're looking for themselves.

Glue 将围绕一个活动“中心”构建，为链上用户聚合 DeFi 服务。这种管理水平使得 Glue 与大多数其他区块链的构建明显不同。通常，他们的用户必须自己找到他们想要的东西。

"‘Centralization' is a dirty word in crypto for a good reason but from a UX perspective I think we can have a much more central interface," SnapShot said. Ogle said Glue Hub will make on-chain onboarding smooth – "almost like Coinbase."

“‘集中化’在加密领域是一个肮脏的词，这是有充分理由的，但从用户体验的角度来看，我认为我们可以拥有一个更加集中的界面，”SnapShot 说。 Ogle 表示，Glue Hub 将使链上上线变得顺利——“几乎就像 Coinbase 一样”。

The approach targets the 90% of crypto users who SnapShot said stick to centralized exchanges, rather than the "one million – basically no one" that he said operate on-chain.

该方法针对的是 SnapShot 所说的坚持中心化交易所的 90% 的加密货币用户，而不是他所说的在链上操作的“一百万——基本上没有人”。

Glue Hub won't be the only place where users can trade. The chain is permissionless, meaning anyone can build and launch anything for anyone to use. These creations could be integrated with Glue Hub if they pass security checks like audits commissioned by Glue.

Glue Hub 不会是用户可以交易的唯一地方。该链是无需许可的，这意味着任何人都可以构建和启动任何东西供任何人使用。如果这些作品通过了 Glue 委托的审计等安全检查，则可以与 Glue Hub 集成。

Audits have emerged in crypto as a kind of marketing tool in their own right. Projects commission reports from chain-checking specialists who scour their smart contracts to squash money-losing bugs. These checks aren't definitive – plenty of audited projects still get exploited – but projects tout their clean bills of health as stamps of approval.

审计本身已成为加密货币中的一种营销工具。项目委托来自链检查专家的报告，他们仔细检查他们的智能合约以消除亏损的错误。这些检查并不是确定的——许多经过审计的项目仍然被利用——但项目将其干净的健康证明作为批准的标志。

That practice has gone too far, according to Ogle, who said he used to run an auditing firm. Many projects are only willing to be transparent about good-looking reports, and opt to bury the bad, he said.

奥格尔说，这种做法太过分了，他说他曾经经营过一家审计公司。他说，许多项目只愿意对好看的报告保持透明，而选择掩盖不好的报告。

"That's not good for security, for the cryptosphere itself," he said.

“这对安全、对加密领域本身都不利，”他说。

In place of this Ogle said high-caliber projects on Glue could be subjected to audits funded by the chain via the Glue Security Fund. This fund will get its money from a tiny tax applied to every transaction, the founders said. It will pay for various efforts to promote security across the entire chain.

Ogle 表示，Glue 上的高水平项目可以接受该链通过 Glue 安全基金资助的审计。创始人表示，该基金将从对每笔交易征收的少量税中获得资金。它将付出各种努力来促进整个链条的安全。

Audits don't always work. Lending protocol Euler lost $200 million to a hack that slipped past 10 audits in two years. Ogle participated in Euler's recovery as part of the war room that tracked down the hacker and negotiated the return of that money. Ogle claims he has a 65% success rate in getting money back for the 40-odd exploited projects he's assisted.

审计并不总是有效。借贷协议 Euler 因黑客攻击而损失了 2 亿美元，该黑客在两年内未通过 10 次审计。奥格尔作为作战室的一部分参与了欧拉的恢复，追踪黑客并协商返还这笔钱。奥格尔声称，他协助的 40 多个被开发项目的退款成功率高达 65%。

"We have actual funds set aside for me and a group of people to go and chase down anyone who does bad things on" Glue, Ogle said. He later added that any security service (be they vigilante detectives, auditors or analytics compliance tools) will be able to apply for grants from the GSF. Holders of Glue's token will determine what's funded, he said.

奥格尔说：“我们为我和一群人预留了实际资金，用于追捕任何在胶水上做坏事的人。”他后来补充说，任何安全服务（无论是治安侦探、审计员还是分析合规工具）都可以向 GSF 申请拨款。他说，Glue 代币的持有者将决定资助的内容。

The idea with GSF is to disincentivize hackers from trying to attack Glue projects in the first place. They won't be able to catch everybody, Ogle said. But if would-be hackers are comparison-shopping targets, they might think twice about hitting the mark that has a war chest ready to pay for chasing them down.

GSF 的想法是首先阻止黑客尝试攻击 Glue 项目。奥格尔说，他们不可能抓住所有人。但如果潜在的黑客是比较购物的目标，他们可能会三思而后行，是否要达到有足够资金来追捕他们的目标。

Transactions on Glue will be multi-sig, meaning any attempt to move money from wallets will require multiple approvals from the user. Ogle said this

Glue 上的交易将是多重签名的，这意味着任何从钱包中转移资金的尝试都需要用户的多次批准。奥格尔这样说