MLSNews

《未闻》区块链技术日报,聚焦业内技术更新,做您最好的眼睛。

View project on GitHub

​MLSNEWS

——————◆ 20190510 ◆——————

  • 【技术】ZkVM:一种快速,机密的智能合约的新设计(ZkVM: a new design for fast, confidential smart contracts)

    我们一直在寻找使Stellar更好的方法:更具可扩展性,更高效,更灵活。通常这意味着我们直接在协议上工作。但有时候我们会采用更“空白”的方法,想象一下区块链运作的方式完全不同。这样的侧链研究有助于我们开发功能并学习可以应用于Stellar的东西。

    我们很高兴地宣布这种研究的最新例子,我们称之为零知识虚拟机 ZkVM 。ZkVM是一个实验性的多资产区块链架构,用于可扩展和保密的智能合约。

    We’re always looking for ways to make Stellar better: more scalable, more efficient, more flexible. Usually that means we work directly on the protocol. But sometimes we take a more “blank slate” approach and imagine entirely different ways for a blockchain to function. Sidechain research like this helps us develop features and learn things that we can apply back to Stellar.

    We’re excited to announce the latest example of such research, which we’re calling ZkVM, the zero-knowledge virtual machine. ZkVM is an experimental multi-asset blockchain architecture for scalable and confidential smart contracts.

  • 【技术】MakerDAO治理中关键漏洞的技术描述(Technical Description of Critical Vulnerability in MakerDAO Governance)

    在为Coinbase团队进行审核时,我们DSChief在DappHub库的合同中发现了一个关键漏洞。在地址部署的这份合同的实例是MakerDAO治理系统0x8e2a84d6ade1e7fffee039a35ef5f19f13057152的核心组成部分,拥有超过1亿美元的锁定资产。我们负责任地向MakerDAO团队披露了漏洞,该团队负责维护DappHub代码和受该问题影响最大的项目。

    在这里,我们提供了一份与MakerDAO系统相关的技术报告,指出使用DSChief合同的其他项目也可能受到漏洞的影响。这个问题现已得到缓解,最后剩下的约50名用户被鼓励从遗留投票合同中迁移他们的MKR代币。可以在Coinbase的报告中找到幕后发生的事情以及三个团队如何合作的详细说明。

    While working on an audit for the Coinbase team, we found a critical vulnerability in the DSChief contract of the DappHub library. The instance of this contract deployed at address 0x8e2a84d6ade1e7fffee039a35ef5f19f13057152 was the core component of MakerDAO’s governance system, and had over $100 million in locked assets. We responsibly disclosed the vulnerability to the MakerDAO team, who maintains both the DappHub code and the project most affected by the issue.

    Here, we present a technical report of our findings as they pertain to the MakerDAO system, noting that other projects using the DSChief contract might also be affected by the vulnerability. The issue has now been mitigated, and the last remaining ~50 users are encouraged to migrate their MKR tokens from the legacy voting contract. A detailed account of what happened behind the scenes and how the three teams collaborated can be found in Coinbase’s report.

  • 【技术】以太坊上的零信任比特币(ZBTC: Zero-trust wrapped Bitcoin on Ethereum)

    以太坊有望成为全球信息信任层。比特币作为先驱者,作为储备货币持有。比特币在以太坊上作为ERC20提供,由一组受信任的参与者“包装”。我们建议在抵押债务头寸(CDP)的激励下实施一种不受信任的比特币版本。通过使用任何人都可以不信任地操作的链Oracle,我们可以证明跨链抵押品(比特币)已存入CDP。然后,我们需要一个等效的以太作为抵押品,这样参与者就可以被鼓励从WBTC处理“兑换比特币”,并确保防止两条链之间的种族攻击。这样,我们就可以在以太坊上建立第一个真正的无信任包装比特币,为未来跨链资产的创新铺平道路。

    Ethereum is on track to become the global trust layer for information. Bitcoin, as the forerunner, keeps its hold as a reserve currency. Bitcoin is available on Ethereum as an ERC20, ‘wrapped’ by a trusted set of actors. We propose to implement a trustless version of Bitcoin, based off the same incentives in collateralized debt positions (CDP’s). By using a chain oracle, that can be trustlessly operated by anyone, we can prove cross-chain collateral (Bitcoin) has been deposited into a CDP. Then we require an equivalent of Ether to be collateral, such that the actors can be incentivised to process ‘redeeming Bitcoin’ from WBTC, as well as insuring against race attacks between the two chains. In doing so, we can build the first real trustless wrapped Bitcoin on Ethereum, and pave the way for future innovations of cross-chain assets.

  • 【技术】闪电网络即小额支付?Lightning Labs 核心开发者带你深入本质

    如果你的理解中,闪电网络大体上就是小额即时支付手段,那么是时候从一个更本质的层面来理解它了。日前,链闻邀请两位闪电网络专家 —— Lightning Labs 基础设施技术负责人 Alex Bosworth 和 Iterative Capital 研究主管 Leo Zhang —— 从专业技术和行业研究两个维度呈现闪电网络更清晰的轮廓。

    火炬余温尚在,网络趁势布局。在一轮由精英和平民 Bitcoiners 同推动的「闪电火炬」布道浪潮结束后,关于闪电网络的最新消息也不断传来。

    Lightning Labs 推出相关桌面客户端,知名钱包上线,网站和社交媒体嵌入闪电网络钱包,应用的探索正在前行;另一方面,数据监测闪电网络发展速度在爆发式增长后放缓,对于闪电网络缺点的探讨再起。无论是进展还是缺陷,在判断前景之前,深入了解这类尚属早期的技术才是关键。 毕竟,早期并不意味着简单 —— 如果你的理解中,闪电网络大体上就是小额即时支付手段,那么是时候从一个更本质的层面来理解它了。

    —————《未闻》(MLSNews)—————

    未来实验室新闻工作室