「比特币MEV」狙击铭文市场,BRC-20的压力测试?

Odaily星球日报Pubblicato 2023-11-13Pubblicato ultima volta 2023-11-13

Introduzione

留给散户的BRC-20不多了?

如果你对科幻小说感兴趣,肯定听说过《三体》以及其中的「智子」——三体人操控的微观粒子,把质子展开成二维并蚀刻上电路,制成超级计算机,成为三体人驻地球的大使,监视地球人并锁死地球的基础科学。

如今,「智子机器人」降临在了 BRC-20 生态。

如下图所示,BRC-20 的 mempool 中出现很多供应数量(supply)为 1 或个位数的铭文,原因是有人部署了一个抢跑机器人,每当发现 mempool 中有新出现的铭文部署,机器人就会部署一样的名称(tink),把供应量设置为 1 ,通过支付高 gas 第一个完成部署,导致别人无法再部署同名代币。

「比特币MEV」狙击铭文市场,BRC-20的压力测试?

创建数量为 1 的小方块即为狙击新创建 tink 的杰作 图源:GeniiData

BRC-20 的智子机器人是什么?

而这个 BRC-20 代币狙击机器人是由比特币开发者 Rijndael(@rot 13 maxi)于 10 月 3 日公开声明部署,其名称「智子」(Sophon)的灵感来源于科幻小说《三体》。

「比特币MEV」狙击铭文市场,BRC-20的压力测试?

在介绍 Sophon 的攻击原理之前,我们需要先清楚 BRC-20 代币的运行规则。无论是部署(Deploy)、铸造(Mint)还是转账(Transfer)都遵循先到先得的规则。对于部署(Deploy)来说,若有同名的 BRC-20 代币被部署,最先部署的被视为唯一成功的部署。

相关阅读:《Binance 终于上线 ORDI,一文了解炒了半年的 BRC-20 

Sophon 利用的就是「先到先得」以及交易公开的规则,机器人通过监视 mempool,每当发现有新的 BRC-20 代币部署时,机器人就会支付一笔高 gas 费抢先部署同名代币,并将供应量设置为 1 ,这样别人就无法获得新部署的代币,并且机器人部署的代币供应量只有 1 枚,无法获得市场流通。

「比特币MEV」狙击铭文市场,BRC-20的压力测试?

不过 Rijndael 在 10 月 27 日宣布停止运营 Sophon,理由是花费太多 gas 费。Sophon 停运后,Rijndael 捐赠了 UTXO 中的比特币给 opensats。

尽管 Sophon 只运行了 20 余天,但却短暂地造成了 BRC-20 代币的部署洼地。

Dune 看板数据显示,Sophon 于 10 月 3 日激活后,基于文本的铭文从前一天的 49, 000 个骤降到 13, 700 个,下降了 72% 。10 月 23 日,Sophon 的资金耗尽后的第二天,数量从 11, 500 个升至 74, 300 个,增幅达 540% 。

「比特币MEV」狙击铭文市场,BRC-20的压力测试?

缺口处为 Sophon 部署阶段 图源:Dune

Ordinals Hub 维护者 cbspears(@cbspears)也评论到「自从 Sophon 部署以来,UTXO 数量减少了 1000 万以上,而在他关闭 Sophon 的那一刻,UTXO 数量就开始增加。Rijndael 实际上是在保存比特币。」

但最近,随着 Rijndael 开源了 Sophon 代码,BRC-20 的 mempool 中又有类似的狙击机器人开始活动。Rijndael 在接受采访时表示「我认为有一个 Sophon 的副本正在运行,而且不是我,这很棒」。

mempool 是 PVP,BRC-20 的压力测试

社区里对 Sophon 的存在褒贬不一,有人认为这是利好已经部署的 BRC-20 代币,也有人说这是比特币 OG 的复仇,保护比特币免受 BRC 20 的粉尘攻击。因为连 Ordinals 协议首席维护者 raph(@raphjaph)也在打趣比特币生态的推文评论区中呼吁我们需要 Sophon。

「比特币MEV」狙击铭文市场,BRC-20的压力测试?

左侧为矿机,右侧为刘慈欣的科幻小说《三体:黑暗森林》

但在 Sophon 的部署者 Rijndael 看来,他需要向支持 BRC-20 的人证明,使用比特币作为「基于块包含排序的全局命名空间是一种易受攻击的机制」。

Rijndael 称 BRC-20 的 mempool 为「PVP」,即玩家与玩家对战,由于 BRC-20 的游戏规则是先到先得,就像一场真人的 MMO 游戏,你需要时刻警惕其他玩家对你发起的攻击。Rijndael 在接受采访时表示「你必须假设 mempool 中潜伏着怪物,如果你的部署容易受到攻击,怪物就会来吃掉你的代币」。

我们可以从 Rijndael 将 UTXO 中的比特币捐赠给 opensats 证明他部署 Sophon 不是为了获利,或许可以将其理解成一种对 BRC-20 的压力测试。

不过,Rijndael 部署 Sophon 是否真的为了完善 BRC-20 的规则不得而知,因为他在回复为什么要这么做时给出的答案是——「为了文明」。

「比特币MEV」狙击铭文市场,BRC-20的压力测试?

比特币上的 MEV?

「没有人再告诉我比特币上没有 MEV 了」,Sophon 的存在也让社区出现了讨论比特币 MEV 和私人内存池(Private Mempool)的声音。

MEV 一词源于以太坊,原本是「矿工可提取价值」(Miner Extractable Value)的缩写。以太坊从 PoW 转 PoS 之后改名为「最大可提取价值」(Maximal Extractable Value)。

在 POW 机制下,当用户在区块链上提交一笔交易,交易信息不会立马被记在区块,而是会被暂短的放在公开待处理的交易池中,每个人都可以看到其中的内容。套利者和矿工可以监视此交易池,并以此来最大化获利,比如在打包区块的过程中,矿工可以利用自身权力,对提交的交易排序,将自己的交易排在真实用户的前面,来拉高真实用户的交易成本。

而私人内存池(Private Mempool)通常是指独立于公共网络内存池的一个特定节点的内存池。公共网络内存池是包含待确认交易的集合,这些交易等待矿工打包并添加到区块中,而私人内存池是某个特定矿工或网络节点独自维护的内存池。

BRC-20 的 mempool 运行规则——交易公开、先到先得——如果被利用就会带来 MEV。想象一下,当 BRC-20 的 mempool 中出现不止一个类似 Sophon 的抢跑机器人会发生什么?

Letture associate

U.S. Government Bans Foreign Nationals from Using Fable 5, Anthropic Issues Rebuttal

U.S. Government Bans Foreign Access to Fable 5, Anthropic Issues Rebuttal On June 12th, the U.S. government ordered AI company Anthropic to immediately suspend all foreign access—including foreign nationals within the U.S. and Anthropic's own foreign employees—to its newly released Fable 5 and Mythos 5 AI models, citing national security concerns. This forced Anthropic to temporarily disable access to both models for all users globally, as it cannot technically differentiate user nationality at scale. The models, released just three days prior, represent Anthropic's highest public capability tier. Fable 5 is the first publicly available model from the advanced "Mythos" family, while Mythos 5 is a less-restricted version for approved cybersecurity and critical infrastructure partners. The government's directive was reportedly triggered by claims from another company that it could "jailbreak" Mythos 5, raising alarm within the Trump administration. Anthropic, in a detailed public statement, strongly challenged this rationale. The company argues the demonstrated "jailbreak" is a narrow, non-generalized technique that merely involves identifying minor, known software vulnerabilities—a capability common to other publicly available models like OpenAI's GPT-5.5 and routinely used by cybersecurity defenders. Anthropic stated it has complied with the order but disagrees with the government's standard, warning that applying it industry-wide would halt all new frontier model deployments. The company criticized the lack of a transparent, fact-based legal process and expressed confidence the situation stems from a misunderstanding. It is working to restore access and will release more technical details within 24 hours. Other Anthropic models remain unaffected.

链捕手8 min fa

U.S. Government Bans Foreign Nationals from Using Fable 5, Anthropic Issues Rebuttal

链捕手8 min fa

The Revelation from the Raydium Theft Incident: New DeFi Vulnerabilities Lurking in Forgotten Old Contracts

**Raydium Exploit Reveals DeFi's Hidden Risk: Forgotten "Zombie" Contracts** A recent attack on Raydium's deprecated V3 AMM pools resulted in a loss of approximately $1.34 million. The hacker exploited pools that were no longer supported by Raydium's current UI or SDK but remained fully functional and accessible on-chain. This incident highlights a critical, often overlooked category of risk in DeFi: inactive or legacy smart contracts that projects fail to properly decommission. Since March 2025, there have been at least 8 publicly reported attacks targeting such abandoned contracts, with total losses around $10.8 million. Including older pools and deprecated features, the count rises to 10 incidents with roughly $22.5 million in losses. These "zombie contracts" represent a lifecycle management failure rather than a code vulnerability, yet they are typically misclassified under general "code bug" categories in security reports, masking the true scale of the problem. The root cause is that projects often merely document a contract as "deprecated" without taking essential technical steps to secure it: withdrawing remaining assets, disabling external call functions, and implementing ongoing monitoring. These forgotten, under-monitored components become prime targets for attackers. To address this, the industry needs to recognize "zombie contracts" as a distinct risk category and establish standardized decommissioning protocols. Essential steps should include: 1) a formal retirement announcement, 2) removal of all front-end integrations, 3) withdrawal of locked assets, 4) disabling key contract functions, 5) ongoing security monitoring, 6) clear user communication, and 7) a post-mortem analysis. The value of a DeFi project lies not only in its current TVL but also in the security of its historical codebase, which has now become a new attack surface.

Foresight News1 h fa

The Revelation from the Raydium Theft Incident: New DeFi Vulnerabilities Lurking in Forgotten Old Contracts

Foresight News1 h fa

Robots Begin to 'Consume Data': The Hidden Production Chain from Indian Data Factories to Billion-Dollar Humanoid Robots

Robots have started to 'consume data,' driving the formation of a new industrial supply chain focused on producing training data for embodied AI. Unlike large language models, which are trained on vast internet text corpora, embodied AI models face a 'data desert' in the physical world. This has created a massive demand for first-person perspective video data (Ego Data), captured by workers wearing cameras in places like Indian garment factories. Companies like Neocambrian AI are establishing 'data factories' where workers perform standardized tasks (e.g., sorting clothes, kitchen organization) to generate thousands of hours of video. Research, such as NVIDIA's EgoScale, demonstrates that scaling this human demonstration data predictably improves robot performance, particularly for dexterous manipulation. This has validated a training path combining large-scale human data for pre-training with smaller amounts of robot-specific data for fine-tuning. The value of different data types varies significantly, forming a 'data pyramid.' The base consists of low-cost, large-scale internet and Ego Data. Higher layers include more expensive motion-capture data (e.g., from data gloves), simulation/synthetic data, and the most costly and scarce layer: real robot teleoperation data. This demand has spawned a layered ecosystem of data suppliers: low-cost data factories, motion capture and alignment specialists, robot-native teleoperation service providers, simulation data companies, and platforms aiming for data standardization. Robot companies themselves are adopting a 'layered procurement' strategy: outsourcing generic Ego Data while building in-house capabilities for robot-specific adaptation data and the critical deployment/failure data generated in real-world applications. The industry is shifting focus from hardware and basic mobility to the data pipelines required for general-purpose capability. While parallels exist to data labeling companies like Scale AI in the LLM boom, the physical complexity of robot data—involving action success ambiguity and sim-to-real gaps—requires more integrated solutions for data collection, annotation, and a continuous feedback loop. The race is on to build the data engines that will teach robots to operate reliably in the unstructured real world.

marsbit4 h fa

Robots Begin to 'Consume Data': The Hidden Production Chain from Indian Data Factories to Billion-Dollar Humanoid Robots

marsbit4 h fa

Trading

Spot
Futures
活动图片