Tornado Cash 制裁事件和“投毒”事件引发的四点思考

元宇宙之道Publicado em 2022-08-10Última atualização em 2022-08-10

Resumo

隐私对于 Crypto 来说是一件很奇怪的事,很多人不以为然,但也有人在不断专研新的隐私技术,那我们究竟是否应该拥抱隐私呢?

隐私对于 Crypto 来说是一件很奇怪的事,很多人不以为然,但也有人在不断专研新的隐私技术,那我们究竟是否应该拥抱隐私呢?

前些天,美国财政部宣布制裁了以太坊混币协议 Tornado Cash,并要求 Circle 冻结受制裁的 USDC 账户,此外,Tornado 的开发者也突然遭到了 GitHub 的暂时封杀。

而在今日凌晨,有人开始将 Tornado Cash 混币过的 ETH 发送到 Brian Armstrong、Beeple、Shaq 等业内知名人士的 ENS 钱包地址,目的是让这些钱包也受到污染,这也被很多网友戏称为加密界的“投毒”事件。

而这一连串事件暴露出来了很多问题,以下是笔者暂时看到的 4 点:

1、老生常谈的中心化稳定币审查问题

USDC 作为一个受美国监管机构监管的中心化稳定币,自然是无法抗审查的,根据 Circle 首席执行官 Jeremy Allaire 透露,如果他们不冻结受制裁的地址,将面临故意逃避美国制裁合规义务的指控,这可能会导致最高 30 年的监禁。

这里需要明确的一点是,抗审查是适用于所有人的,因为被恶意“投毒”就会面临审查问题,那此时就关乎到你的财产了,哪怕你是无辜的,你的资产也可能会遭到冻结。

那我们是不是应该拥护一个去中心化的稳定币,最好是使用无需信任的比特币作为抵押品?(注意:WBTC 是需要信任的,它无法抵抗审查,因此 Makerdao 的方法是不可行的,我们首先需要的一个无需信任的 BTC 跨链方案)

2、中心化代码库的审查问题

此次 Tornado Cash 事件,GitHub 的封杀动作是令人意想不到的,而绝大部分所谓去中心化的 Crypto 项目代码库都依托于 GitHub ,因此有人便倡议建立去中心化的 GitHub,而例如 Radicle 这样的开发工具正在尝试做这样的事。

3、ENS 的隐私泄露问题

ENS 将复杂的以太坊地址替换为便于人类记忆的字符,这有助于 Crypto 的普及,然而它也带来了严重的隐私泄露问题。

以往,我们只是通过 ENS 地址来查探别人的财务数据,这仅仅是侵犯了隐私,但并没有造成实际的威胁,而在这次“投毒”事件当中,相关的 ENS 地址都可能会遇到一些麻烦。

这也提醒了我们,ENS 地址并不适合与个人的财务关联到一起。

4、可选隐私协议的致命缺点

最后,是 Tornado Cash 协议本身的问题,由于它是一个自由选择使用的协议,因此普通 Crypto 用户不太会去使用这个协议,而像黑客等对隐私需求较大的“用户”才会经常使用 Tornado Cash 混币协议,这引发了美国监管机构的担忧,并最终引来了制裁。

但如果隐私是一种默认选项,网络中的任何交易都带有隐私属性,那么这个网络的抗审查性会更强,当然,监管机构依然会追查相关的涉黑交易,这要求网络提供的隐私属性并不是绝对的,否则整个网络依然会遭到制裁。

而例如 Aleo 以及 Aztec 这样的通用隐私层协议,可能会改善这方面的一些问题,而它们能否平衡监管与协议可用性,会是它们能否取得成功的关键。

小结

全球监管机构对 Crypto 行业的监管只会越来越紧,这无疑会对现有的一些脆弱的基础设施造成巨大的冲击,但对一些新兴事物或叙事,这也意味着新的机会。而隐私作为区块链的重要属性之一,往往是被多数人忽视的,希望最近的事件能够改变这种状态,当然,需要指出的是,绝对的隐私是不允许被实现的,这一点不用怀疑。

Leituras Relacionadas

How to Detect AI-Generated Videos? A Review of Dynamic, Traceable, and Explainable Detection Systems

**How to Detect AI-Generated Videos: A Survey on Dynamic, Traceable, and Explainable Detection Systems** With rapid advances in AI video generation (e.g., Sora, Veo), creating highly realistic, multi-minute videos is now possible, widening the gap with detection research. Current AI video detection, often limited to unreliable binary classifications, is insufficient. This survey, accepted at ACL 2026, reframes the goal as **"factual fidelity verification"**—checking if a video's content (who, when, where, what) aligns with the real world perceptually and cognitively. It categorizes AI-generated videos into three paradigms: **Local Manipulation Videos (LMV**, e.g., face swaps), **Audio-Visual Editing (AVE**, e.g., lip-syncing), and **Generative Video Synthesis (GVS**, fully synthetic videos like Sora's). Detection challenges evolve from visual artifacts in LMV to multi-modal inconsistencies in AVE and higher-level world knowledge violations in GVS. The core proposal is a **Vision-Language Dual-View framework** with four hierarchical layers: 1. **Layer 1 (Intrinsic Visual Cues):** Analyzes low-level signal statistics, noise patterns, and physiological signals. 2. **Layer 2 (Spatiotemporal Consistency):** Checks for temporal coherence in object motion and scene dynamics. 3. **Layer 3 (Cross-Modal Consistency):** Verifies alignment between video, audio, and text within the video. 4. **Layer 4 (Language-Guided World-Level Reasoning):** Uses external knowledge, facts, and physical laws to judge semantic plausibility and factual correctness. The survey traces a shift in detection focus from lower layers (1 & 2) toward higher, language-involved layers (3 & 4). It also reviews evolving evaluation metrics and datasets tailored for each video paradigm. The conclusion advocates for a **dynamic, evidence-first detection system** that moves beyond simple classification. Future trustworthy detection requires combining visual evidence (from CV) with semantic reasoning and explanation (from NLP & multimodal AI), ultimately creating traceable and explainable judgments about a video's adherence to real-world constraints.

marsbitHá 29m

How to Detect AI-Generated Videos? A Review of Dynamic, Traceable, and Explainable Detection Systems

marsbitHá 29m

It Turns Out the First Real-World Application of AI x Crypto is in Security Auditing

The article explores the surprising trend where AI's first major impact on crypto has been in security auditing, not in areas like trading or analytics. It details how AI-powered tools are dramatically lowering the barrier to finding smart contract vulnerabilities, enabling attackers to scan thousands of contracts and execute exploits within minutes. This has rendered traditional, manually-produced audit reports with their month-long validity periods increasingly obsolete, creating a critical "structural crack" in the old security model. Cases like Drift Protocol and KelpDAO show that even extensively audited protocols can be hacked through social engineering, operational flaws, or infrastructure misconfigurations beyond pure code review. Attackers are also using AI to find and exploit vulnerabilities in years-old, deployed contracts. Notably, OpenZeppelin's co-founder has expressed a grim view that "all DeFi is insecure" due to AI's asymmetric advantage. In response, the audit industry is undergoing a fundamental shift. While there's a short-term spike in defensive re-audits, the long-term business model is changing. Firms are developing AI-assisted systems and moving from one-time report deliveries towards embedded, continuous services like real-time monitoring and formal verification. Examples include AI tools uncovering critical, previously missed vulnerabilities in heavily audited protocols like Curve Finance and Zcash. The conclusion is that security must become a continuous investment, not a one-time checkbox, and audit firms must rapidly evolve their tools and service models to survive.

marsbitHá 36m

It Turns Out the First Real-World Application of AI x Crypto is in Security Auditing

marsbitHá 36m

Never expected that the first tangible application of AI x Crypto is in security auditing

Unexpectedly, the initial major application of AI in the Crypto sphere has turned out to be security auditing. In 2026, DeFi has faced significant security challenges, with 121 hacking incidents resulting in approximately $942 million in losses. While AI was expected to first impact areas like quantitative trading, its initial breakthrough has instead transformed security auditing by drastically lowering the cost and skill barrier for finding smart contract vulnerabilities. The traditional audit model is facing obsolescence. Advanced AI models, such as Claude Mythos, enable attackers to scan thousands of contracts and identify vulnerability patterns at scale, compressing the time from discovery to execution to mere minutes. This renders the month-long validity of traditional audit reports ineffective. Notably, attacks now frequently target well-audited, established protocols by exploiting business logic flaws, operational security weaknesses, and even years-old historical contracts, demonstrating that old audit reports offer zero protection. This pressure is forcing a fundamental shift in the industry. In the short term, a wave of defensive re-auditing is occurring, driven by projects seeking to meet new AI-era security standards and regulatory requirements. In the long run, audit firms' business models are diverging. The one-time report delivery model is declining in value, as evidenced by platforms like Code4rena shutting down. Leading firms are now pivoting towards AI-powered defense, integrating continuous monitoring, real-time on-chain risk detection, and embedding security directly into the development phase, as seen with tools like OpenZeppelin's Skills system. Ultimately, the era of "audit once, secure forever" is over. Security must become a continuous, embedded infrastructure investment for projects. For audit companies, survival depends on proactively transforming from traditional service providers into platforms offering AI-native, ongoing security solutions.

链捕手Há 43m

Never expected that the first tangible application of AI x Crypto is in security auditing

链捕手Há 43m

Trading

Spot
活动图片