David Schwartz 称 XRP Ledger 的三明治攻击风险确实存在但被夸大

bitcoinistPublished on 2026-06-30Last updated on 2026-06-30

Abstract

瑞波前首席技术官大卫·施瓦茨回应了关于XRP账本可能使用户面临“三明治攻击”的担忧,他表示这种风险确实存在但被夸大了。三明治攻击通常发生在用户交易被确认前,攻击者通过在该交易前后各插入一笔交易,从受害者交易导致的价格变动中获利,使用户最终以更差的价格成交。 施瓦茨指出,随着更多交易活动转移到链上,执行质量等市场结构问题变得更为重要。用户关心能否获得公平的成交、是否容易被机器人利用,以及网络设计是否更容易被滥用。他认为,虽然风险真实存在,但这并非XRP账本的根本性缺陷,重要的是承认风险的存在,并对其进行理解、缓解和清晰说明。 对于XRP而言,此议题关乎网络可信度而非短期价格。若XRP账本希望支持重要的交易和结算活动,用户需要确信其执行不易被操纵。施瓦茨对此问题的公开讨论有助于维护信任,避免开发者过快驳回用户担忧。 总之,关于三明治攻击的辩论并不证明XRP账本不安全,而是提醒人们,随着链上市场成熟,执行质量和防范掠夺性交易将成为影响其采用的关键因素。这不仅是技术讨论,更关乎用户信任。

Ripple 前首席技术官 David Schwartz 对关于 XRP Ledger 可能使用户面临三明治攻击的担忧进行了回应,他表示风险确实存在,但被夸大了。

这是一个谨慎的立场,也可能是阐述这个问题的正确方式。抢先交易和三明治攻击并非凭空想象。它们是去中心化市场中一个常见的问题,尤其是在交易者与流动性池交互且交易顺序可能被利用时。但风险的存在并不自动意味着每个用户都持续暴露于风险之中,也不意味着网络存在缺陷。

对于 XRP Ledger 用户来说,重要的一点是市场结构问题正变得越来越严重。随着更多交易活动转移到链上,执行质量的细节变得重要。用户关心他们是否能获得公平的成交,机器人能否利用他们的交易,以及网络设计是否让滥用行为变得更容易或更难。

三明治攻击究竟意味着什么

三明治攻击通常发生在交易者的交易在确认前被侦测到时。攻击者在其之前和之后各放置一笔交易,从而从受害者交易引发的价格变动中获利。

通俗地说,用户被"夹击"了。他们可能仍然完成了交易,但价格比预期的要差。

这就是为什么这场辩论对 XRP 之外也具有重要意义。它关乎去中心化交易系统在保持开放和无许可的同时,能否保护用户。每条链和每个去中心化交易所的设计都在权衡取舍。有些优先考虑速度。有些优先考虑透明度。有些优先考虑低费用。但是,当交易可见且市场足够流动时,成熟的参与者就会寻找可乘之机。

Schwartz 关于风险被夸大的观点表明,他并不认为这个问题是 XRPL 存在的致命缺陷。尽管如此,承认风险存在是很重要的,因为这能让讨论立足于现实。

这对 XRP 为何重要

对 XRP 而言,这与其说关乎即时价格,不如说关乎网络信誉。

如果 XRPL 想要支持严肃的交易和结算活动,用户需要有信心,相信交易的执行不易被操纵。这并不意味着网络必须消除每一个可能的攻击途径。没有一个公共区块链能做到这一点。但这确实意味着应该理解、缓解风险,并清楚地解释风险。

Schwartz 参与讨论这个事实是有益的。当开发者过快否定用户担忧时,加密网络往往会失去信任。更好的方法是区分真实风险与夸大其词的说法,然后讨论实际的解决方案。

对于 XRP 持有者来说,得到的启示是审慎的。关于三明治攻击的辩论并不能证明 XRPL 不安全。它提醒我们,随着链上市场的成熟,执行质量以及对掠夺性交易的保护将成为采用故事的一部分。

换句话说,这不仅仅是一个技术争论。这是一个用户信任问题。

本文由新闻编辑部撰写,Samuel Rae 编辑。

本报告基于 Beincrypto 发布的信息。 发布于 Beincrypto

Trending Cryptos

Related Questions

QRipple前CTO David Schwartz对XRP账本的'三明治攻击'风险有何看法?

ADavid Schwartz认为,XRP账本确实存在'三明治攻击'的风险,但这种风险被夸大了。他并不认为这是XRP账本的根本性缺陷,但承认风险存在对于基于事实的讨论很重要。

Q什么是'三明治攻击',它会对用户造成什么影响?

A'三明治攻击'是一种抢先交易形式。攻击者在发现用户待确认的交易后,会抢在该交易之前和之后各下一个订单,从而从用户交易造成的价格波动中获利。用户虽然能完成交易,但成交价格会比预期更差。

Q文章认为关于三明治攻击的辩论对XRP的意义是什么?

A文章认为,这对XRP而言,更多是关于网络信誉而非短期价格。如果XRP账本希望支持严肃的交易和结算活动,用户需要对其执行不易被操纵有信心。风险和缓解措施需要被清楚地理解和解释。

Q作者如何评价David Schwartz对这个问题的回应方式?

A作者认为Schwartz就此事展开对话是有益的。加密货币网络常常因为开发者过快驳回用户担忧而失去信任。更佳的方式是将真实风险与夸大其词的说法分开,然后讨论实际的解决方案。

Q文章最后对XRP持有者提出的核心建议是什么?

A文章总结的建议是保持衡量。关于三明治攻击的辩论并不能证明XRP账本不安全,但它提醒我们,随着链上市场成熟,交易执行质量以及对掠夺性交易的防护能力将成为其被采纳故事的一部分。这不仅是技术问题,更是用户信任问题。

Related Reads

You Use Claude and Codex Every Day, but Meta Has Restricted Internal Use

In May, Meta imposed internal restrictions on its engineers regarding the use of Claude Code and Codex, two widely used AI programming tools. Despite being a major client, Meta's guidelines, still in effect, prohibit these external models from being used for specific tasks to prevent potential "escalations with partners." The core concern is "distillation"—the risk that outputs from Claude or Codex could inadvertently contaminate the training data and evaluation processes for Meta's in-house AI coding assistant, MetaCode. If MetaCode is trained or evaluated using data generated by these external models, it risks learning their capabilities rather than developing its own, blurring the line of intellectual origin. The restrictions are precise: engineers cannot use the external models to generate test questions, debug source code, or suggest test cases. AI-generated content is also barred from environments accessible to MetaCode. However, AI can still assist with peripheral tasks like workflow setup and code organization, provided all outputs are manually reviewed. This caution reflects a broader industry dilemma. While distillation is a common technique, using a competitor's model output for training raises legal and ethical questions about the ownership of derived capabilities. Contractual terms from companies like OpenAI and Anthropic explicitly forbid using their outputs to build competing products, putting enforcement power in the hands of rivals. The move is also financially motivated, as Meta seeks to reduce its hefty internal AI spending, estimated in the billions this year. Meta's policy illustrates the delicate balance companies must strike: leveraging powerful external AI tools while safeguarding the integrity and independence of their own AI development. As AI systems increasingly help build other AIs, distinguishing the origin of capabilities becomes a fundamental challenge for the entire industry.

marsbit1h ago

You Use Claude and Codex Every Day, but Meta Has Restricted Internal Use

marsbit1h ago

Why Do We Need an AI Content Perspective Today?

The article "Why Do We Need an AI Content Perspective Today?" explores the complex and often contentious integration of AI into the cultural and creative industries, particularly film and television. It begins with the cancellation of Amazon's AI-generated animation "Punky Duck," highlighting the ethical debates surrounding AI content. AI's rapid advancement is transforming video production, enabling cost-effective, full-length AI films (e.g., "RAPHAEL," "Dreams of Violets") while sparking industry resistance over issues like "synthetic actors." The core debate has shifted from whether to use AI to how to use it responsibly. The article analyzes why AI's entry into film is uniquely unsettling. It distinguishes between "cultural fast food" (short-form, fast-paced content like micro-dramas) and "cultural main courses" (traditional, long-form film/TV). AI currently excels at the former, matching its fragmented narratives, shallow emotional needs, and free-to-consumer models. However, venturing into the latter challenges the human-centric essence of storytelling—creativity, emotional depth, and the unique value of human labor and experience. While AI can generate massive volumes of content and lower costs, it risks devaluing human creativity, leading to homogenized output, and creating unfair competition through potential intellectual property infringement. Its efficiency also amplifies content safety risks, making preemptive governance crucial. To counter these risks, the article proposes establishing clear boundaries guided by a human-centered AI content perspective. It outlines four principles: 1) Amplify, rather than displace, human creative space; 2) Respect and protect human creative output; 3) Ensure human creative control and responsibility remain paramount; and 4) Guarantee transparency and traceability in AI creation. The conclusion emphasizes that humans must act as the "helmsmen" of technology, steering AI development to enhance, not replace, the core human values at the heart of cultural expression.

marsbit2h ago

Why Do We Need an AI Content Perspective Today?

marsbit2h ago

Trading

Spot

Hot Articles

What is XRP 2.0

XRP 2.0: A New Frontier in the Cryptocurrency Landscape Introduction to XRP 2.0 In the ever-evolving realm of cryptocurrency, new projects continuously emerge, vying for attention and adoption. One such promising initiative is XRP 2.0, a novel cryptocurrency project designed to leverage advanced blockchain technology and robust encryption methodologies. While the name draws parallels with Ripple’s XRP, it’s crucial to note that XRP 2.0 operates independently, focusing on enhancing transaction security, privacy, and scalability. As the digital financial landscape increasingly embraces decentralized solutions, XRP 2.0 aims to contribute meaningfully to web3 and the overall expansion of crypto projects. What is XRP 2.0? At its core, XRP 2.0 is a cryptocurrency project that aims to create a secure and decentralized digital currency ecosystem. Its foundational technology integrates sophisticated blockchain principles with cutting-edge encryption techniques. The overarching goal of XRP 2.0 is to establish itself as a reliable and efficient platform enabling swift transaction execution while prioritizing enhanced privacy protections for its users. The project is promoted as a solution to many limitations faced by existing cryptocurrencies, proposing a system that can handle a higher volume of transactions with improved speed and privacy. This versatility positions XRP 2.0 as a significant contender in a marketplace riddled with various digital currencies. Who is the Creator of XRP 2.0? The identity of the creator behind XRP 2.0 has been flagged as ‘Wilbur.’ However, comprehensive details regarding Wilbur or their associated entity remain elusive. The anonymity of many cryptocurrency creators is not an uncommon phenomenon in the industry, often designed to maintain a degree of privacy and security. Who are the Investors of XRP 2.0? As of now, specific information related to the investment foundations or organizations supporting XRP 2.0 is not publicly available. In the cryptocurrency sector, the backing by reputed investors can significantly influence a project's credibility and success, yet the transparency regarding the financial supporters of XRP 2.0 has not been established. How Does XRP 2.0 Work? XRP 2.0 stands out by employing a combination of blockchain technology and advanced encryption algorithms that ensures secure and decentralized transactions. Its innovative structure includes unique features designed to foster user engagement and broaden functionalities beyond conventional cryptocurrency transactions. Among these features, XRP 2.0 incorporates AI-powered capabilities, such as text-to-image and text-to-speech functionalities. These additions are designed to enhance the interactive experience for users, promoting broader applicability across various sectors. By bridging technological advancements with user-centered design, XRP 2.0 aims to capture the attention of a diverse range of individuals and enterprises looking to integrate cryptocurrency solutions into their operational frameworks. Timeline of XRP 2.0 Understanding XRP 2.0 requires examining the milestones that have defined its journey thus far: July 23, 2023: XRP 2.0 is introduced as a novel cryptocurrency project, aiming to revolutionize secure and decentralized transaction capabilities in the blockchain domain. September 8, 2023: The launching of another project, XRP20, occurs, marking the emergence of an ERC-20 token on the Ethereum blockchain that remains unrelated to XRP 2.0. November 13, 2023: The XRP Ledger undergoes a significant update with the release of rippled server software version 2.0.0. It is essential to note that this development is disconnected from the XRP 2.0 cryptocurrency project. Key Points About XRP 2.0 To distill the essence of XRP 2.0, several critical factors emerge: Unique Features: The inclusion of features like AI-powered text-to-image and text-to-speech further diversifies the potential applications of XRP 2.0. Blockchain Technology: The framework utilizes advanced blockchain mechanisms and encryption protocols, ensuring a secure and decentralized environment for transactions. Scalability and Privacy: XRP 2.0 prioritizes enhanced privacy protections in transaction processes and the scalability necessary to accommodate a growing user base. No Affiliation with Ripple: Importantly, despite its name, XRP 2.0 does not have any allegiance or collaboration with Ripple’s XRP, distinguishing its operational framework and objectives within the cryptocurrency ecosystem. Conclusion XRP 2.0 represents an ambitious venture into the cryptocurrency sphere, aiming to offer a combination of security, privacy, and efficiency in digital transactions. By integrating sophisticated technologies and user-friendly features, the project sets out to broaden the horizons of what cryptocurrency can achieve in today's digital economy. While the anonymity of its creator and lack of disclosed investors might raise questions for some, XRP 2.0's focus on advanced functionalities and decentralisation enhances its appeal amidst an increasingly crowded crypto market. As the cryptocurrency landscape continues to evolve, XRP 2.0 may yet emerge as a pivotal player in the expansion of secure and scalable blockchain solutions.

1.0k Total ViewsPublished 2024.04.01Updated 2024.12.03

What is XRP 2.0

Discussions

Welcome to the HTX Community. Here, you can stay informed about the latest platform developments and gain access to professional market insights. Users' opinions on the price of XRP (XRP) are presented below.

活动图片