如何看待Optimism欺诈证明的安全问题?

Odaily星球日报Publicado em 2024-08-20Última atualização em 2024-08-20

Resumo

OP Foundation 提出要硬分叉修复问题,并将其转为受许可证明。

原文作者:Haotian

最近,@Optimism 由于 Fault Proof System 出现安全审计问题遭到了海外社区的质疑。原本无许可的欺诈证明的机制,在被发现重大安全问题后,OP Foundation 竟然提出要硬分叉修复问题,并将其转为受许可证明?具体怎么回事呢?

1)简单而言:Fault Proof System 是一种用于验证 Layer 2 网络状态正确性的机制,任何人可以无许可向 L1 上的纠纷虚拟机提交 L2 状态,并接受他人的挑战,如果挑战成功则会触发奖惩机制。

这就是 OP-Rollup 机制确保安全性而必须存在的欺诈证明机制。6 月份 Fault Proof System 的上线算是弥补了一直以来市场对 OP Stack 缺乏有效挑战机制的诟病问题。

2)不过,最近一次社区驱动的审计发现了该欺诈证明系统的多个漏洞,Optimism 基金会的反应却让人大跌眼镜:

1、将欺诈证明 VM opcode 级别的漏洞视为小安全漏洞;

2、把欺诈证明系统排除在了外部审计范围之内;

3、暂时将欺诈证明的无许可调整为许可机制,并提出一项名为 Granite 的硬分叉计划来解决安全问题;

如此这般,让人不得不怀疑所谓 Fault Proof System 存在意义和有效性,

3)如何看待这件事呢?在我看来:

1、Optimism 推出 Fault Proof System 完全是为了进一步扩大 OP Stack 阵营所进行的必要的安全挑战机制,市场对 Optimism 本身是否存在这样的挑战机制已经「乐观化」了;

2、Fault Proof System 确实构造精密复杂,大部分状态可在 L2 本地进行校验,只把一些关键部分推送给 L1 的故障虚拟机来裁夺,没错是开发了特定 op code 的虚拟机,这样做既可以确保 L1 验证的低成本同时又能确保安全性;

3、Fault Proof System 从无许可调成许可,并被紧急禁用也暴露了 OP 基金会和多签安全委员会的过多权利,欺诈证明即使无许可也在安全委员会的控制之下;

4、Optimism 实现 Stage 1 的安全和去中心化目标至少相比同阵营的 Arbitrum 掉队了,ZK-Rollup 在技术上的领先优势会进一步得到重视。

Leituras Relacionadas

2028: The Arrival of Recursive Self-Improvement (RSI)

**AI Recursive Self-Improvement (RSI): The Countdown to 2028 Begins** AI is no longer just a trained tool but is starting to rewrite its own evolutionary pace. According to Anthropic co-founder Jack Clark, there is a 60% probability that by the end of 2028, Recursive Self-Improvement (RSI) will become a reality. This means AI could autonomously design and build a more capable next-generation version of itself without any human researcher involvement—Claude 10 creating Claude 11, for instance. Supporting this timeline, Google DeepMind's CEO Demis Hassabis confirms that all leading AI labs are intensely focused on RSI, making it an industry-wide priority. He expresses profound concern, stating this potential is what keeps him awake at night. Concrete data underscores this acceleration: - METR evaluations show current top models like Claude are solving tasks up to the 16-hour limit of existing test frameworks. - In Epoch AI's challenging MirrorCode benchmark, Claude Opus 4.7 recreated complex software in hours for a fraction of the human cost. In one extreme test, AI autonomously coded for 19 days straight. - Anthropic reports over 80% of its codebase is now written by Claude, and researcher productivity has increased up to 8-fold since 2024. - OpenAI's policy blueprint highlights RSI as a major upcoming governance challenge. CEO Sam Altman reportedly hinted RSI might arrive within six months, potentially delaying OpenAI's massive IPO. The implication is an impending "intelligence explosion," where AI-driven progress outpaces human control. The central question is no longer if it will happen, but whether humanity is ready.

marsbitHá 6h

2028: The Arrival of Recursive Self-Improvement (RSI)

marsbitHá 6h

Trading

Spot
活动图片