网络安全的设计空间很广。攻击矢量不计其数,跨越芯片和指令集、操作系统、运行时间、应用程序。当然也有很多大型网络安全公司。
我在 2016 年首次接触以太坊时,真正的网络安全公司只有那些聪明的签约审计员。 人工审计一直都很重要,而且其重要地位将一直保持下去。但是,人工审计是不够的。从 2018 年开始,许多公司推出了围绕智能合约代码分析的自动化流程,用来发现实时合同交互中的异常点等等。随着网络安全团队加大对各自解决方案的投资,这些机制变得越来越全面,其复杂性也在日益增加。
在过去五年里,大家一直把加密货币中的网络安全和保险部门作为单独行业进行讨论。但是,在我看来,这两者密不可分,最终将汇集在一起,使所有主要服务提供者都提供一套完整的堆栈,包含软件解决方案、实时保护用户和合同的实时服务、人工审计、保险产品。保险是这套堆栈的逻辑结束状态,因为它代表了一个完整的周期,使安全公司对其协助保障的消费者的应用程序承担一些金融风险。虽然 Sec3 尚未提供保险,但他们正朝着这一最终状态而努力。
今天,我很高兴地告诉大家,Multicoin Capital 率先投资 Sec3 这轮 1000 万美元的融资,参与投资的还有 Sanctor Capital、Essence VC,以及 Santiago R. Santos 、Solana 联合创始人 Anatoly Yakovenko 等若干著名的天使投资人。
Sec3 非常熟悉 Solana 的 Sealevel 虚拟机 (SVM)。创始人Chris Wang (Twitter) 和 Jeff Huang (Twitter、GitHub) 先审计 SVM,再启动主网。该团队包括若干名计算机科学博士,以及德克萨斯 A&M 大学的一位终身教授。在进行了一系列人工审计后,他们认识到许多人工的工作有可能实现自动化,Sec3 因此而诞生。
他们推出了第一款产品,Xray,这款静态分析工具能自动与 GitHub 结合,并连续分析智能合约的薄弱环节。他们最近推出了 Watchtower 和 Circuit Breaker,这套产品能进行实时安全监测,在异常点袭击公共链上的合约之前及袭击时就发现它们。这些产品已迅速成为 Solana 开发者的行业标准。
在短时间内推出一套完整的安全产品,提供去中心化和实时的攻击防御服务,并覆盖保险,这是不可能做到的。构建这样一个完整的愿景需要很多年,需要周密规划运作的顺序,需要随着构建的开展再次进行投资。为此, Sec3 团队和大家分享了他们的秘密宏图(受 Tesla 启发),提出了这一愿景的要点。
我们很感谢有机会支持 Sec3 团队,帮助他们利用去中心化来实现完整的安全堆栈愿景。
Disclosure: Unless otherwise indicated, the views expressed in this post are solely those of the author(s) in their individual capacity and are not the views of Multicoin Capital Management, LLC or its affiliates (together with its affiliates, “Multicoin”). Certain information contained herein may have been obtained from third-party sources, including from portfolio companies of funds managed by Multicoin. Multicoin believes that the information provided is reliable and makes no representations about the enduring accuracy of the information or its appropriateness for a given situation. This post may contain links to third-party websites (“External Websites”). The existence of any such link does not constitute an endorsement of such websites, the content of the websites, or the operators of the websites.These links are provided solely as a convenience to you and not as an endorsement by us of the content on such External Websites. The content of such External Websites is developed and provided by others and Multicoin takes no responsibility for any content therein. Charts and graphs provided within are for informational purposes solely and should not be relied upon when making any investment decision. Any projections, estimates, forecasts, targets, prospects, and/or opinions expressed in this blog are subject to change without notice and may differ or be contrary to opinions expressed by others.
The content is provided for informational purposes only, and should not be relied upon as the basis for an investment decision, and is not, and should not be assumed to be, complete. The contents herein are not to be construed as legal, business, or tax advice. You should consult your own advisors for those matters. References to any securities or digital assets are for illustrative purposes only, and do not constitute an investment recommendation or offer to provide investment advisory services. Any investments or portfolio companies mentioned, referred to, or described are not representative of all investments in vehicles managed by Multicoin, and there can be no assurance that the investments will be profitable or that other investments made in the future will have similar characteristics or results. A list of investments made by funds managed by Multicoin is available here: https://multicoin.capital/portfolio/. Excluded from this list are investments that have not yet been announced (1) for strategic reasons (e.g., undisclosed positions in publicly traded digital assets) or (2) due to coordination with the development team or issuer on the timing and nature of public disclosure.
This blog does not constitute investment advice or an offer to sell or a solicitation of an offer to purchase any limited partner interests in any investment vehicle managed by Multicoin. An offer or solicitation of an investment in any Multicoin investment vehicle will only be made pursuant to an offering memorandum, limited partnership agreement and subscription documents, and only the information in such documents should be relied upon when making a decision to invest.
Past performance does not guarantee future results. There can be no guarantee that any Multicoin investment vehicle’s investment objectives will be achieved, and the investment results may vary substantially from year to year or even from month to month. As a result, an investor could lose all or a substantial amount of its investment. Investments or products referenced in this blog may not be suitable for you or any other party.
Multicoin has established, maintains and enforces written policies and procedures reasonably designed to identify and effectively manage conflicts of interest related to its investment activities. For more important disclosures, please see the Disclosures and Terms of Use available at https://multicoin.capital/disclosures and https://multicoin.capital/terms.