Bing VenturesWhy Is Ampleforth Likely to Be the First Truly Successful Algorithmic Stablecoin?
If you didn’t already know, different algorithm stablecoins actually vary in design. Ampleforth, the oldest algorithmic project, is trying to change the meaning of “algorithmic stabilisers.” Its token, THE AMPL, introduced an elaborate “Rebase” mechanism that increased the supply of tokens when the price of contemporary coins rose above a certain threshold. But for a more fundamental purpose, AMPL is not a true stablecoin, despite its explicit price target.Source：CoingeckoRelying on this simp...
Bing VenturesThe Future of Actively Managed On-Chain Asset Protocols: Unlock the Hidden Socialfi Property of Enzy…
By Kyle, Investment Manager@Bing Ventures Like Stablecoin, on-chain asset management has been one of the first blockchain scenarios to land. The DAO’s organizational structure naturally removes organizational barriers to decentralized asset management. Enzyme, a pioneer of multi-chain asset management protocols, was created in 2016. More importantly, it can use tokens to incentivise asset issuers and liquidity participants to tap into more decentralized financial scenarios. From flatter inves...
Bing Ventures链上数据产品洞察：Web3时代的数据分析革命
作者：Kyle Liu, Bing Ventures投资经理引言在当今快速发展的区块链领域，链上数据已经成为了核心资产，其生态地位日益重要。从代币交易到NFT铸造，链上活动的每一个细节都在绘制着价值流动的全貌。在这个数据驱动的时代，链上数据不仅仅是数字的堆砌，而是市场动态、用户行为乃至整个区块链生态系统健康状况的真实反映。 市场营销学告诉我们，消费者行为分析对于整体市场的未来趋势具有深远的影响。类似地，在链上世界中，对用户行为的深度分析及其洞察对于市场参与者而言具有无可估量的价值。Nansen、Lookonchain和Dune Analytics作为领先的加密圈数据分析项目，不仅为用户提供了深入的链上数据分析，更是区块链发展不可或缺的重要部分。本研究将深入探讨这三大平台的特性，以及它们对于区块链技术发展的重要意义。链上数据分析的重要性链上数据反映用户行为。在区块链的世界中，链上数据可以代表个人，机构，交易所，做市商等一切参与链上活动的身份。链上数据分析能够提供洞察市场趋势和用户行为、发现潜在机会和风险、提高运营效率和降低成本、支持决策和战略规划，以及加强安全和风控。通过对链上数据...
Riding the next waves of blockchain and Web3 innovation
Bing VenturesWhy Is Ampleforth Likely to Be the First Truly Successful Algorithmic Stablecoin?
If you didn’t already know, different algorithm stablecoins actually vary in design. Ampleforth, the oldest algorithmic project, is trying to change the meaning of “algorithmic stabilisers.” Its token, THE AMPL, introduced an elaborate “Rebase” mechanism that increased the supply of tokens when the price of contemporary coins rose above a certain threshold. But for a more fundamental purpose, AMPL is not a true stablecoin, despite its explicit price target.Source：CoingeckoRelying on this simp...
Bing VenturesThe Future of Actively Managed On-Chain Asset Protocols: Unlock the Hidden Socialfi Property of Enzy…
By Kyle, Investment Manager@Bing Ventures Like Stablecoin, on-chain asset management has been one of the first blockchain scenarios to land. The DAO’s organizational structure naturally removes organizational barriers to decentralized asset management. Enzyme, a pioneer of multi-chain asset management protocols, was created in 2016. More importantly, it can use tokens to incentivise asset issuers and liquidity participants to tap into more decentralized financial scenarios. From flatter inves...
Bing Ventures链上数据产品洞察：Web3时代的数据分析革命
作者：Kyle Liu, Bing Ventures投资经理引言在当今快速发展的区块链领域，链上数据已经成为了核心资产，其生态地位日益重要。从代币交易到NFT铸造，链上活动的每一个细节都在绘制着价值流动的全貌。在这个数据驱动的时代，链上数据不仅仅是数字的堆砌，而是市场动态、用户行为乃至整个区块链生态系统健康状况的真实反映。 市场营销学告诉我们，消费者行为分析对于整体市场的未来趋势具有深远的影响。类似地，在链上世界中，对用户行为的深度分析及其洞察对于市场参与者而言具有无可估量的价值。Nansen、Lookonchain和Dune Analytics作为领先的加密圈数据分析项目，不仅为用户提供了深入的链上数据分析，更是区块链发展不可或缺的重要部分。本研究将深入探讨这三大平台的特性，以及它们对于区块链技术发展的重要意义。链上数据分析的重要性链上数据反映用户行为。在区块链的世界中，链上数据可以代表个人，机构，交易所，做市商等一切参与链上活动的身份。链上数据分析能够提供洞察市场趋势和用户行为、发现潜在机会和风险、提高运营效率和降低成本、支持决策和战略规划，以及加强安全和风控。通过对链上数据...
Riding the next waves of blockchain and Web3 innovation
Share Dialog
Share Dialog
Subscribe to Bing Ventures
Subscribe to Bing Ventures
<100 subscribers
<100 subscribers
By Kyle Liu, Investment Manager at Bing Ventures
EIP-4337 standardized smart contact wallets and the related infrastructure. But Account Abstraction is still in its early stages and has low adoption. For example, many Layer2s have yet to support it. These constraints mean that users still face a deep learning curve and huge cost of use.
By introducing a proxy layer, Account Abstraction (“AA”) wallets aim to lower the entry barriers of personal wallets and offer users easier-to-use account systems. Particularly, AA wallets utilize smart contracts as their accounts and introduced a proxy layer between smart contracts and users, allowing the proxy to interact with the blockchain on behalf of users. As a result, AA wallets free end-users from the burden of handling complex blockchain concepts such as private keys and can be easily managed via emails or phones. AA wallets are programmable and offer higher flexibility in management and account behaviors. They are also upgradeable and highly customizable, allowing for new features and improvements to be introduced without upgrading to Ethereum’s entire consensus mechanism.
That said, we believe security is paramount for Account Abstraction. Given that transactions on the blockchain are tamperproof and irreversible, if a user’s account is compromised, irreparable losses may occur. Therefore, when designing AA wallets, the various aspects of security must be considered, including that related to account management and usage, storage and protection of private keys, and confirmation and authorization of transactions, etc.
In this article, we’ll look at the safety features and vulnerabilities of AA wallets, discuss how to strike a balance between user experience and security, and explore how will AA solutions evolve next.
Many proposals have been made to improve and standardize Account Abstraction on Ethereum with EIP-4337 being the latest advancement, which later become ERC-4337. ERC-4337 offers an innovative approach that allows transactions to be initiated by smart contracts rather than Externally Owned Accounts (EOAs) without making changes to the protocol’s consensus layer. ERC-4337 creates an alternate mempool to process transactions separately from the main Ethereum network’s mempool. Accounts actions and their associated data fields are buddled and routed into the mempool, from which validators gather and handle them, create a “bundle transaction” and include them in Ethereum blocks.
The goal of EIP-4337 is to make wallets more flexible and upgradable, allowing for the introduction of features such as multi-signature and social recovery, as well as simpler and more efficient signature algorithms and post-quantum secure signatures. ERC-4337 wallets also enjoy increased flexibility in wallet verification logic, supporting arbitrary signature schemes and nonce verification logic.
These features bring important security benefits. In particular, the security of AA wallets is enhanced in the following aspects:
Verification logic: AA wallets ensure the legitimacy and security of user operations through more flexible and advanced verification logic, such as signatures.
Gated entry point contract: AA wallets outsource complex safety features to a global contract called the entry point which is gated in a way that only the trusted entry point can cause a wallet to perform any actions or pay fees.
Separated validation and execution layers: AA wallets use two separate functions to handle the verification and execution of user operations, increasing security and flexibility.
Validation and execution simulation: User operations will be checked for legitimacy through a simulated execution to ensure they can be included in a future block. This keeps AA wallets from DoS attacks.
AA improves the security and decentralization of wallets. By adding support for features such as multi-sig and private key storage and protection mechanisms, AA wallets can better safeguard the security of user assets and ensure the reliability of transactions. However, these safety measures do not provide 100% security against attacks and loopholes. There’s still room for continued research and improvement. Currently, the market’s focus remains more on the technological paradigm rather than user needs and experience.
Private key storage is the most vulnerable link in a wallet. It’s imperative that AA wallets ensure users’ private keys are stored in secure locations and that ample measures are in place to prevent unauthorized access. Online attacks are another major threat to the security of AA wallets. Users’ private keys might be obtained by attackers through phishing, malware, and other means, resulting in their digital assets being stolen.
As mentioned earlier, in an AA wallet, the functionality of Ethereum’s transaction mempool is replicated in a higher-level system. Instead of directly submitting transactions to the blockchain, users send UserOperation objects to the alternate mempool, from which validators or Bundlers package them into a single “bundle transaction” and send it to the Entry Point contract. The Entry Point contract orchestrates the execution of contract accounts and makes sure the validator/Bundler is properly compensated for the transaction fee.
This scheme ensures the safety of a wallet by allowing only the trusted entry point to cause a wallet to perform any transaction or action such as paying the fee or incrementing the nonce. It also makes user accounts more “programmable”.
Compared with other proposals such as EIP-2938 and EIP-3074, EIP-4337 comes closest to full account abstraction without any consensus layer changes. However, it splits the transaction process into several steps, leading to added complexity and more gas overhead than regular transactions. And it also gives rise to potential loopholes. What’s more, as it’s incompatible with the workflow of existing wallet protocols, its adoption might be affected.
To address the aforementioned security issues, AA wallet solutions might employ various measures to further enhance security while maintaining a good user experience. Multi-sig is one of them. Namely, confirmation from multiple users is required to execute a transaction. This will significantly reduce the likelihood of successful attacks. Using hardware wallets to store users’ private keys can also enhance security because hardware wallets protect private keys from being stolen by keeping them isolated from Internet-connected devices.
In the design of AA wallets, security should be a primary consideration. While it’s important to provide a good user experience, defects in security might expose user assets to safety dangers and risks, resulting in serious consequences. How should developers strike a balance between security and user experience? We believe it’s necessary to consider at least the following four aspects.
Private Key Management: It’s important that users' private keys are safely managed in AA wallets to protect their assets from potential attacks. This can be achieved by using measures like encryption algorithms, hardware wallets, and multi-factor authentication. However, overly stringent security measures might result in a decrease in user experience, such as requiring frequent identity authentication or multiple steps of authentication. Therefore, developers need to find a balance between the two to ensure both the safety of private keys and the convenience of the authentication process for users accessing their assets.
Transaction Confirmation: AA wallets need to provide timely transaction confirmation and fast transaction processing to deliver a good user experience. Meanwhile, they must be able to detect and reject double payments and other fraudulent activities. Technological measures such as could be used to balance the safety and transaction speed requirements, ensuring both asset safety and a smooth user experience.
Multichain Support: Multichain compatibility is a trend for all Web3 products. Future-proof AA wallets should be able to support multiple blockchains to meet users’ needs on various blockchains. However, each ecosystem is adopting AA with slight variations, which creates uncertainty around what the ultimate implementation of AA will be like for each chain and VM. Thus, when adopting Account Abstraction, it might be necessary to consider the work required to achieve interoperability among different ecosystems. Also, each chain has its unique security features and user experience requirements, which should also be paid attention to while trying to strike a balance between security and user experience.
Cost: The cost of on-chain transactions can be a prohibitive factor to application development. Even if we assume most transactions will happen on Layer2s and the fees will be subsidized, the cost for deployment and upgrades at scale might still be expensive. Particularly with AA wallets, upgrading wallets requires upgrading the underlying smart contracts, which can introduce new vulnerabilities and get very pricey.
Considering factors such as user experience and security, we believe AA wallet solutions on Ethereum have the largest potential for growth and gaining traction. AA solutions in the Ethereum ecosystem, such as zkSync, Fuse Network, and zkSafe, are typically flexible, safe, and easy to use in their design, providing a good user experience. But they are also faced with security challenges and scalability issues, including safety risks associated with smart contracts and challenges to their capacity to handle high transaction workloads. Also, it should be noted that Account Abstract is still in its early stages with a low adoption rate, and further innovation and development are required to drive its adoption and maturation.
AA wallets create an open market by introducing a permissionless network of public nodes including Bundlers, Paymasters, and Signature Aggregators, enabling users to get high-quality services with the lowest fees. From a short and mid-term perspective, infrastructure providers’ ability to deploy Bundlers, Paymasters, and Signature Aggregators quickly and in a customized way will be put to the test. The resulting competition will encourage innovation and ultimately lead to the optimization of both security and user experience.
Meanwhile, infrastructure providers such as StackUp will likely develop modular Bundler and Paymaster services and gradually make them permissionless. Also, there is a pressing need for scaffolding tools to speed up front-end developments so developers can focus more on business logic. Related libraries for dapp development like ether.js are also needed. They could encapsulate functions such as wallet creation with Web2 socials or emails, fast deployment of Paymasters and Signature Aggregators, as well as the creation, signing, and sending of UserOperations and related event monitoring, etc. These tools will simplify dapps' integration with different wallets.
From a mid and long-term perspective, new account standards will emerge and some of them might even be able to separate account authentication from smart contract wallets, allowing users to transport their account data from one wallet to another. And as technological barriers lower and new products become more and more homogeneous, competition for AA wallets will intensify. More progressive innovations, including, for example, permissionless and modular infrastructure services, integration with existing services, dapp SDKs, and independent account layers, will be required to upgrade flexibility and user experience to the next level.
About Bing Ventures
With a team of veteran financial professionals, researchers, and technologists, Bing Ventures is a pioneering venture capital firm that backs startups and entrepreneurs driving the next wave of Web3 and blockchain innovations.
For more information, please visit us at the following channels:
Website: https://www.bing-ventures.com/
Twitter: https://twitter.com/BingVentures
Medium: https://medium.com/@BingVentures
Telegram channel:
By Kyle Liu, Investment Manager at Bing Ventures
EIP-4337 standardized smart contact wallets and the related infrastructure. But Account Abstraction is still in its early stages and has low adoption. For example, many Layer2s have yet to support it. These constraints mean that users still face a deep learning curve and huge cost of use.
By introducing a proxy layer, Account Abstraction (“AA”) wallets aim to lower the entry barriers of personal wallets and offer users easier-to-use account systems. Particularly, AA wallets utilize smart contracts as their accounts and introduced a proxy layer between smart contracts and users, allowing the proxy to interact with the blockchain on behalf of users. As a result, AA wallets free end-users from the burden of handling complex blockchain concepts such as private keys and can be easily managed via emails or phones. AA wallets are programmable and offer higher flexibility in management and account behaviors. They are also upgradeable and highly customizable, allowing for new features and improvements to be introduced without upgrading to Ethereum’s entire consensus mechanism.
That said, we believe security is paramount for Account Abstraction. Given that transactions on the blockchain are tamperproof and irreversible, if a user’s account is compromised, irreparable losses may occur. Therefore, when designing AA wallets, the various aspects of security must be considered, including that related to account management and usage, storage and protection of private keys, and confirmation and authorization of transactions, etc.
In this article, we’ll look at the safety features and vulnerabilities of AA wallets, discuss how to strike a balance between user experience and security, and explore how will AA solutions evolve next.
Many proposals have been made to improve and standardize Account Abstraction on Ethereum with EIP-4337 being the latest advancement, which later become ERC-4337. ERC-4337 offers an innovative approach that allows transactions to be initiated by smart contracts rather than Externally Owned Accounts (EOAs) without making changes to the protocol’s consensus layer. ERC-4337 creates an alternate mempool to process transactions separately from the main Ethereum network’s mempool. Accounts actions and their associated data fields are buddled and routed into the mempool, from which validators gather and handle them, create a “bundle transaction” and include them in Ethereum blocks.
The goal of EIP-4337 is to make wallets more flexible and upgradable, allowing for the introduction of features such as multi-signature and social recovery, as well as simpler and more efficient signature algorithms and post-quantum secure signatures. ERC-4337 wallets also enjoy increased flexibility in wallet verification logic, supporting arbitrary signature schemes and nonce verification logic.
These features bring important security benefits. In particular, the security of AA wallets is enhanced in the following aspects:
Verification logic: AA wallets ensure the legitimacy and security of user operations through more flexible and advanced verification logic, such as signatures.
Gated entry point contract: AA wallets outsource complex safety features to a global contract called the entry point which is gated in a way that only the trusted entry point can cause a wallet to perform any actions or pay fees.
Separated validation and execution layers: AA wallets use two separate functions to handle the verification and execution of user operations, increasing security and flexibility.
Validation and execution simulation: User operations will be checked for legitimacy through a simulated execution to ensure they can be included in a future block. This keeps AA wallets from DoS attacks.
AA improves the security and decentralization of wallets. By adding support for features such as multi-sig and private key storage and protection mechanisms, AA wallets can better safeguard the security of user assets and ensure the reliability of transactions. However, these safety measures do not provide 100% security against attacks and loopholes. There’s still room for continued research and improvement. Currently, the market’s focus remains more on the technological paradigm rather than user needs and experience.
Private key storage is the most vulnerable link in a wallet. It’s imperative that AA wallets ensure users’ private keys are stored in secure locations and that ample measures are in place to prevent unauthorized access. Online attacks are another major threat to the security of AA wallets. Users’ private keys might be obtained by attackers through phishing, malware, and other means, resulting in their digital assets being stolen.
As mentioned earlier, in an AA wallet, the functionality of Ethereum’s transaction mempool is replicated in a higher-level system. Instead of directly submitting transactions to the blockchain, users send UserOperation objects to the alternate mempool, from which validators or Bundlers package them into a single “bundle transaction” and send it to the Entry Point contract. The Entry Point contract orchestrates the execution of contract accounts and makes sure the validator/Bundler is properly compensated for the transaction fee.
This scheme ensures the safety of a wallet by allowing only the trusted entry point to cause a wallet to perform any transaction or action such as paying the fee or incrementing the nonce. It also makes user accounts more “programmable”.
Compared with other proposals such as EIP-2938 and EIP-3074, EIP-4337 comes closest to full account abstraction without any consensus layer changes. However, it splits the transaction process into several steps, leading to added complexity and more gas overhead than regular transactions. And it also gives rise to potential loopholes. What’s more, as it’s incompatible with the workflow of existing wallet protocols, its adoption might be affected.
To address the aforementioned security issues, AA wallet solutions might employ various measures to further enhance security while maintaining a good user experience. Multi-sig is one of them. Namely, confirmation from multiple users is required to execute a transaction. This will significantly reduce the likelihood of successful attacks. Using hardware wallets to store users’ private keys can also enhance security because hardware wallets protect private keys from being stolen by keeping them isolated from Internet-connected devices.
In the design of AA wallets, security should be a primary consideration. While it’s important to provide a good user experience, defects in security might expose user assets to safety dangers and risks, resulting in serious consequences. How should developers strike a balance between security and user experience? We believe it’s necessary to consider at least the following four aspects.
Private Key Management: It’s important that users' private keys are safely managed in AA wallets to protect their assets from potential attacks. This can be achieved by using measures like encryption algorithms, hardware wallets, and multi-factor authentication. However, overly stringent security measures might result in a decrease in user experience, such as requiring frequent identity authentication or multiple steps of authentication. Therefore, developers need to find a balance between the two to ensure both the safety of private keys and the convenience of the authentication process for users accessing their assets.
Transaction Confirmation: AA wallets need to provide timely transaction confirmation and fast transaction processing to deliver a good user experience. Meanwhile, they must be able to detect and reject double payments and other fraudulent activities. Technological measures such as could be used to balance the safety and transaction speed requirements, ensuring both asset safety and a smooth user experience.
Multichain Support: Multichain compatibility is a trend for all Web3 products. Future-proof AA wallets should be able to support multiple blockchains to meet users’ needs on various blockchains. However, each ecosystem is adopting AA with slight variations, which creates uncertainty around what the ultimate implementation of AA will be like for each chain and VM. Thus, when adopting Account Abstraction, it might be necessary to consider the work required to achieve interoperability among different ecosystems. Also, each chain has its unique security features and user experience requirements, which should also be paid attention to while trying to strike a balance between security and user experience.
Cost: The cost of on-chain transactions can be a prohibitive factor to application development. Even if we assume most transactions will happen on Layer2s and the fees will be subsidized, the cost for deployment and upgrades at scale might still be expensive. Particularly with AA wallets, upgrading wallets requires upgrading the underlying smart contracts, which can introduce new vulnerabilities and get very pricey.
Considering factors such as user experience and security, we believe AA wallet solutions on Ethereum have the largest potential for growth and gaining traction. AA solutions in the Ethereum ecosystem, such as zkSync, Fuse Network, and zkSafe, are typically flexible, safe, and easy to use in their design, providing a good user experience. But they are also faced with security challenges and scalability issues, including safety risks associated with smart contracts and challenges to their capacity to handle high transaction workloads. Also, it should be noted that Account Abstract is still in its early stages with a low adoption rate, and further innovation and development are required to drive its adoption and maturation.
AA wallets create an open market by introducing a permissionless network of public nodes including Bundlers, Paymasters, and Signature Aggregators, enabling users to get high-quality services with the lowest fees. From a short and mid-term perspective, infrastructure providers’ ability to deploy Bundlers, Paymasters, and Signature Aggregators quickly and in a customized way will be put to the test. The resulting competition will encourage innovation and ultimately lead to the optimization of both security and user experience.
Meanwhile, infrastructure providers such as StackUp will likely develop modular Bundler and Paymaster services and gradually make them permissionless. Also, there is a pressing need for scaffolding tools to speed up front-end developments so developers can focus more on business logic. Related libraries for dapp development like ether.js are also needed. They could encapsulate functions such as wallet creation with Web2 socials or emails, fast deployment of Paymasters and Signature Aggregators, as well as the creation, signing, and sending of UserOperations and related event monitoring, etc. These tools will simplify dapps' integration with different wallets.
From a mid and long-term perspective, new account standards will emerge and some of them might even be able to separate account authentication from smart contract wallets, allowing users to transport their account data from one wallet to another. And as technological barriers lower and new products become more and more homogeneous, competition for AA wallets will intensify. More progressive innovations, including, for example, permissionless and modular infrastructure services, integration with existing services, dapp SDKs, and independent account layers, will be required to upgrade flexibility and user experience to the next level.
About Bing Ventures
With a team of veteran financial professionals, researchers, and technologists, Bing Ventures is a pioneering venture capital firm that backs startups and entrepreneurs driving the next wave of Web3 and blockchain innovations.
For more information, please visit us at the following channels:
Website: https://www.bing-ventures.com/
Twitter: https://twitter.com/BingVentures
Medium: https://medium.com/@BingVentures
Telegram channel:
No activity yet