账户抽象钱包:DingPay引领Web3.0的新方向

币界网Pubblicato 2024-08-02Pubblicato ultima volta 2024-08-02

币界网报道:

引言

自2009年比特币地址私钥的64个十六进制字符开始,到2013年比特币改进提案39(BIP39)引入密钥恢复短语的概念,私钥和密钥恢复短语作为保护用户资产的最重要信息,在区块链中持续演进十年。2020年,Vitalik Buterin的EIP-2938:账户抽象提出了更加全面细致的账户抽象概念,账户抽象钱包由此开始发展。那么,如何“把下一个十亿用户带入Web3.0”?或许账户抽象概念所带来的账户抽象钱包可以作为一个方向。

账户抽象与EOA钱包的区别

账户抽象是一种允许用户使用智能合约作为账户的区块链技术,旨在增强以太坊账户(EOA账户)的管理和交互灵活性。EOA钱包,即外部拥有账户,由私钥和密钥恢复短语控制,是目前用户量最大的传统钱包。AA钱包(Account Abstraction Wallet),基于ERC-4337协议,是一种智能合约钱包。EOA钱包的局限性在于资产由私钥和密钥恢复短语控制,一旦泄露将导致钱包资产的损失。对于所有加密货币用户来说,这都是一个安全挑战。过去,我们推出了一些产品来解决私钥和密码恢复短语存储的安全性,例如硬件钱包、冷钱包、多重签名钱包等。但这些对于新手来说使用起来比较困难,其核心仍然依赖于私钥和密码恢复短语的存储和使用。

Oa857KZoHyAygMEI9DLxOxXCBdwHRogJn2r2CR0z.jpeg

EOA钱包的局限性

1. 资产由私钥和密保恢复短语控制。用户必须妥善保管EOA钱包的私钥和助记词,一旦泄露将导致钱包资产的损失。对于所有加密货币用户来说,这都是一个安全挑战。

2. 交互逻辑不够友好。链上gas费用高且不稳定,多种因素影响交易确认,复杂的交易流程使得用户体验不佳。在以太坊网络上执行转账或交易,必须支付原生代币ETH作为gas费才能让交易在链上得到确认。如果用户的钱包中没有ETH,唯一的选择是通过中心化交易所或第三方跨链桥购买,然后转到钱包中。在特殊情况下,由于网络拥堵,可能会出现gas费增加或交易失败,从而给用户带来损失。

以上提到的EOA钱包的局限性,是目前所有新手都会面临的挑战,要解决这些挑战,需要大量的知识学习和补充,在学习过程中还要面对“风险审批”、“风险代币”等挑战。账户抽象概念的引入和发展在一定程度上解决了这些问题。

定义账户抽象

“账户抽象”是指对钱包本身的“抽象”,除了我们熟悉的“私钥、密保”的抽象处理外,还包括对账户交互流程、用户体验、链上体验的抽象处理。从技术角度来看,“账户抽象”是指通过智能合约对账户进行完全控制,某些合约细节对于以太坊协议来说是一个“抽象”的概念。每个账户都是一个智能合约,用户可以自由控制智能合约账户,而无需处理任何私钥或密保恢复短语。从用户角度来看,“账户抽象”对账户交互细节进行了大幅增强和优化,使得钱包使用流程更加便捷,提升了Web3.0的适用性。

账户抽象的主要功能

我们将从“社交恢复”、“签名抽象”、“Gas费用抽象”和“Nonce抽象”四个主要方面介绍“账户抽象”。为了更好地理解“账户抽象”,我们还将在介绍过程中使用更易于理解的示例。

1. 社交恢复:账户抽象将私钥和密保恢复短语抽象出来,用户在创建钱包过程中无需备份私钥和密保恢复短语。若钱包被意外卸载或钱包账户被删除,可通过多因素认证和社交恢复(如邮箱)的方式恢复账户。

2. 签名抽象:账户抽象将ECDSA分离出来,允许用户自定义规则来批准由钱包发起的交易。您可以通过“交易限额”、“多方批准”和“自动付款”功能来控制资产。交易限额:如果签名的价值超出您预设的限额,则与您的智能账户关联的钱包可以拒绝交易或请求额外交易。多方批准:您可以将钱包的部分控制权委托给可信赖的各方,如朋友、家人或服务提供商。自动付款:您可以授权第三方服务从您的账户中“提取”资产以支持特定的经常性支出。

3. Gas费用抽象:账户抽象允许用户创建的智能合约账户使用其他ERC-20代币代为支付Gas费,合约层面会有一个“中继”将ERC-20代币兑换成原生ETH,从而将交易推送到链上。未来项目方甚至可以通过中继捐赠或者赞助费用的方式,实现用户层面的“无手续费互动”。

4. Nonce抽象:账户抽象允许你创建自定义的重放保护机制(而不是像以太坊协议那样强制执行严格的交易排序)。例如,可以使用允许批量处理多个交易的Nonce,从而将多个交易推送到链上。这解决了特定顺序要求引起的问题,使Web3.0更加轻量级。

IelWIbWX8ByvIPlbGiysxtpFVJDdyzvc1rMMIoiq.jpeg

结论

账户抽象是解决EOA钱包局限性的最佳方案之一,为钱包领域带来了更大的灵活性和可操作性。DingPay将引入账户抽象解决EOA的局限性,为用户在Web3.0领域带来更多可能。敬请关注DingPay钱包的最新发展,让我们共同迎接Web3.0的美好未来。

Letture associate

North Korean Hackers Loot $500 Million in a Single Month, Becoming the Top Threat to Crypto Security

North Korean hackers, particularly the notorious Lazarus Group and its subgroup TraderTraitor, have stolen over $500 million from cryptocurrency DeFi platforms in less than three weeks, bringing their total theft for the year to over $700 million. Recent major attacks on Drift Protocol and KelpDAO, resulting in losses of approximately $286 million and $290 million respectively, highlight a strategic shift: instead of targeting core smart contracts, attackers are now exploiting vulnerabilities in peripheral infrastructure. For instance, the KelpDAO attack involved compromising downstream RPC infrastructure used by LayerZero's decentralized validation network (DVN), allowing manipulation without breaching core cryptography. This sophisticated approach mirrors advanced corporate cyber-espionage. Additionally, North Korea has systematically infiltrated the global crypto workforce, with an estimated 100 operatives using fake identities to gain employment at blockchain companies, enabling long-term access to sensitive systems and facilitating large-scale thefts. According to Chainalysis, North Korean-linked hackers stole a record $2 billion in 2025, accounting for 60% of all global crypto theft that year. Their total historical crypto theft has reached $6.75 billion. Post-theft, they employ specialized money laundering methods, heavily relying on Chinese OTC brokers and cross-chain mixing services rather than standard decentralized exchanges. Security experts, while acknowledging the increased sophistication, emphasize that many attacks still exploit fundamental weaknesses like poor access controls and centralized operational risks. Strengthening private key management, limiting privileged access, and enhancing coordination among exchanges, analysts, and law enforcement immediately after an attack are critical to improving defense and fund recovery chances. The industry's challenge now extends beyond secure smart contracts to safeguarding operational security at the infrastructure level.

marsbit1 h fa

North Korean Hackers Loot $500 Million in a Single Month, Becoming the Top Threat to Crypto Security

marsbit1 h fa

Circle CEO's Seoul Visit: No Korean Won Stablecoin Issuance, But Met All Major Korean Banks

Circle CEO Jeremy Allaire's recent activities in Seoul indicate a strategic shift for the company, moving away from issuing a Korean won-backed stablecoin and instead focusing on embedding itself as a key infrastructure provider within Korea’s financial and crypto ecosystem. Despite Korea accounting for nearly 30% of global crypto trading volume—with a market characterized by high retail participation and altcoin dominance—Circle has chosen not to compete for the role of stablecoin issuer. Instead, Allaire met with major Korean banks (including Shinhan, KB, and Woori), financial groups, leading exchanges (Upbit, Bithumb, Coinone), and tech firms like Kakao. This approach reflects a broader industry transition: the core of stablecoin competition is shifting from issuance rights to systemic positioning. With Korean regulators still debating whether banks or tech companies should issue stablecoins, Circle is avoiding regulatory uncertainty by strengthening its role as a service and technology partner. The company is deepening integration with trading platforms, building connections, and promoting stablecoin infrastructure. This positions Circle to benefit regardless of which entity eventually issues a won stablecoin. Allaire also noted the potential for a Chinese yuan stablecoin in the next 3–5 years, underscoring a regional trend of stablecoins becoming more regulated and integrated with traditional finance. Ultimately, Circle’s strategy highlights that future influence in the stablecoin market will belong not necessarily to the issuers, but to the foundational infrastructure layers that enable cross-system transactions.

marsbit1 h fa

Circle CEO's Seoul Visit: No Korean Won Stablecoin Issuance, But Met All Major Korean Banks

marsbit1 h fa

Trading

Spot
Futures
活动图片