가입 후 초대 링크를 공유하면 동영상 재생 및 초대 보상을 받을 수 있습니다.

Richard Liu
@DrPayFi
Co-founder
가입 August 2009
523 팔로잉 중    7K
出发点错了,结论自然也对不了。 智能合约安全领域的传奇人物 Manuel 发出警告,称 AI 代理将让 DeFi 变得根本不安全,并奉劝大家退出。但他的出发点完全错了。 当年信用卡欺诈也被视为数字商业的毁灭性威胁。行业最终胜出,靠的不是“彻底消灭欺诈”(这根本不可能),而是将单次事件的破坏力(Blast Radius)降低到系统可承受的范围内:卡户零责任、代币化、实时检测和发行方保险。 每天有数万亿资金在一条永久存在受攻击面的网络上流动,正是因为他们的核心逻辑是“容错与控制”,而非“绝对消灭”。 航空、早期的互联网和传统银行都经历过这个阶段。它们当年都被贴上过“注定失败”或“根本不安全”的标签。它们最终胜出,不是因为变得毫无瑕疵,而是通过不断迭代,让系统能够承受那些无法避免的失败。 没错,AI 降低了攻击的成本。这是事实。但正如很多人指出的,AI 同样为防御方所用——审计师、安全研究员、白帽黑客和协议团队都在积极拥抱 AI。正如 @StaniKulechov 所说,DeFi 在防御端已经取得了划时代的进步:更强的风控引擎与借贷市场结构、形式化验证、预言机改进、上限管理、熔断机制、自动化监控、SOC2 级运维安全。这些在几个周期前都还没有规模化。整个生态一直在构建抵御攻击所需的基础设施,就像信用卡行业曾经走过的那条路。 AI 不是我们的敌人,黑客才是。我们的策略不是"零漏洞",而是"任何单一漏洞不能干趴协议"。 当你设计每一个系统时都假设漏洞必然存在,你就不再追求一堵不可逾越的墙,而是开始把其破坏力压缩到可以安全吸收的水平。 Manuel 的 PSA:"退出 DeFi" DrPayFi 的 PSA:用正确的方式建设 DeFi DeFi 必胜。
더 보기
Wrong anchor. Manuel is a legend in smart contract security, so when he issues a PSA to exit DeFi because AI agents make it fundamentally unsafe, people listen. But his conclusion anchors on the wrong premise. Credit card fraud was once considered an existential threat to digital commerce. The industry didn’t solve it by eliminating fraud - that was never possible. They won by engineering the per-incident blast radius down to what the system could absorb: $0 cardholder liability, tokenization, real-time detection, and issuer insurance. Trillions flow through card networks daily on top of a permanent attack surface because they anchored on containment, not elimination. History repeats this pattern across aviation, the early internet, and traditional banking. Each was once labeled doomed or fundamentally unsafe. Each won, not by becoming error-free, but by iterating until the system could absorb the failures it couldn't prevent. Yes, AI has lowered the cost of attack. That's real. But as many have noted, AI is just as available to defenders. Auditors, security researchers, whitehats, and protocol teams are using the same tools. And as @StaniKulechov pointed out, DeFi has made generational progress on the defense side: better risk engines and lending market structures, formal verification, oracle improvements, cap management, circuit breakers, automated monitoring, SOC2-grade opsec. None of this existed at scale a few cycles ago. The ecosystem has been building the right infrastructure to guard against attacks, similar to what credit card industry has gone through. AI is not our enemy; hackers are. The anchor isn't "bug-free". It's "no single bug drains the protocol." If you design every system with the assumption that a vulnerability will exist, you stop trying to build an unbreachable wall and start engineering the blast radius down to what the network can safely absorb. The real PSA isn't to exit DeFi. It's to build it right. DeFi will win.
더 보기