jakiro
In 2024, the soaring SUI momentum was strong, and the first cannon of the MOVE ecosystem was launched.
The first is nearly 70%soaring in the past week, allowing the market to pay attention to the dazzling star of this MOVE series again. According to Defillama data,SUI TVL has reached US $ 327 million, an increase of 6.76%in 24 hours, and has risen 73.19%in the past 7.The top three protocols on the current TVL ranking on the chain are: Cetus ($ 62.44 million), Navi Protocol (US $ 61.42 million), and Scallop Lend ($ 54.96 million).
>
As an important member of the MOVE ecosystem, SUI is committed to promoting the security, interoperability and sustainable development of digital assets.Today, follow the security perspective of the Beosin research team, and look at what opportunities are there in the 2024 SUI in 2024.
>
The strong SUI is solana Killer or ETH Killer?
SUI is a high -performance public chain created by Mysten Labs, allowing developers to build low -delay and high throughput on SUI.Mysten Labs was founded by EVAN Meng, the head of the original Facebook project. In December 2021, it raised $ 36 million in financing, and then raised $ 300 million in valuation of more than $ 2 billion in September 2022.
The characteristic of SUI is to use an object -core data model.Each object will store a global, the only ID, an owner’s meta -data data, a version number (Version: each time the object is called 1) and the binary canonical serviceization, and the binary canAs shown in the figure below:
>
Because the data model of the object is adopted, SUI can depend on the transaction according to whether the objects in different transactions rely on each other to deal with each other, so as to handle different transactions at different nodes and achieve parallel transactions in parallel.
SUI divides the objects to Owned Object and Shared Object.
OWNED Object use scenarios include tokens and NFTEssenceFor transactions that only include Owned Object, SUI uses Byzantine Consistent Broadcast (BCB) consensus algorithm to confirm the transaction.The BCB consensus algorithm can be simply understood as the verificationr’s vote for packing transactions, and then the transaction initiator statistical voting results, and then the verification person tests whether the statistical results are correct to determine whether to pack the transaction.The advantage of this algorithm is that the statistical process is executed on the client, reducing the communication time between the verificationists nodes, thereby quickly confirming the transaction.
The Shared Object use scenario is a DEFI, NFT trading market, and games that need to frequently interact with usersEssenceFor transactions containing Shared Object, SUI uses the Narwhal and Bullshark protocol for sorting and verification.Narwhal is the SUI’s trading memory pool. It is responsible for checking the transactions to be processed and generating a transaction through a loopless path.Bullshark reaches a consensus on a particularly traversed by a particular direction, thereby confirming the specific order of these transactions.
>
Based on the above design, the current TPS test of SUI has reached up to 297,000, and the time to confirm that the transaction is about 480ms, and the performance is excellent.
Compared with Solana and Ethereum, what are the advantages of SUI?
(1) The underlying design is safer
The MOVE smart contract supported by SUI requires advanced byte verification and then executed.The MOVE language has built -in bytecode authentication to check resources, types and memory safety.In this way, many common errors can be checked before executing the contract and avoiding the attack of the contract with malicious code.
(2) Native resources safety
The data model with Object (Object) as the core allows developers to use Copy, Drop, Store, and Key to set the permission settings and programming of resources.Essence
(3) Pay more attention to user security
SUI provides transaction pre -execution services. Wallet service providers can inform users of the contract execution results and contract permissions after the pre -execution contract, and help them clearly know the consequences of the transaction may cause the transaction before signing the transaction, which greatly reduces fraudulent fraudrisk.
What are the opportunities to participate in the three swordsmen on Sui?
At present, the SUI header project has a one -stop DEFI project Cetus, the borrowing project Navi Protocol, and the Scallop Lend. These three swordsmen occupy a 50%TVL of the SUI ecology.
1. Cetus
The main goal of CETUS settings is to develop flexible and powerful first -level liquidity networks to facilitate the asset transactions of APTOS and SUI.The goal of the agreement is to provide consumers in the Defi ecosystem with the best trading experience and efficiency.It implements this through key liquidity protocols and a series of related interoperable operating modules.
>
https://app.cetus.zone/pool/list
At present, some liquidity pools have obtained the official liquidity incentives of SUI, and they can also be rewarded by CETUS rewards.
2. Navi Protocol
Navi Protocol provides loan services for mainstream tokens, stablecoins and Cetus tokens.Navi’s innovative functions, such as automatic leverage vaults and isolation models. Users can use their assets and get new trading opportunities at a minimum risk.The design of Navi provides support for digital assets at different risk levels. At the same time, its advanced security functions ensure the protection of user funds and the relief of systemic risks.
>
https://app.naviprotocol.io/market
At present, Navi and OKX Defi have launched an additional tokens’ interest rate hike service, and users can deposit USDC to enjoy up to 35%of APY.Its prize pool is a total of 50000usdc and 100000Cetus, while the prize pool is finished.
3. scalop lend
Scallop Lend is the largest borrowing agreement for SUI ecology and the first Defi agreement to be officially funded by the SUI Foundation.Similar to Navi Protocol, Scallop Lend offers 8 token borrowing services and provides SDK for professional traders.On January 1, 2024, Scallop Lend completed the airdrop Sutra, and the first phase of the airdrop opened.
>
https://app.scallop.io/
Users who missed this airdrop activity can continue to use SCALLOP Lend’s borrowing services to get the second -stage airdrop reward of Scallop Lend.
Beosin launches security audit services for MOVE smart contracts
The cooperation between Beosin and SUI has begun since last year. Previously, the Beosin security team discovered the loopholes of multiple public chains.One of the vulnerabilities is more interesting. After we communicate with the SUI team, we can disclose the detailed information.This is a refusal service vulnerability in the SUI Public Chain P2P protocol, which can cause the node in the SUI network to collapse due to exhaustion of memory.This refusal service vulnerability is caused by an ancient attack method- “memory bomb”. For details, you can read: “Beosin discovered that the Move VM serious level vulnerability: can lead to the collapse of the public chain such as SUI, Aptos, etc.”.
Move contracts that may appear vulnerabilities
1) Developers should maintain a certain degree of security awareness when using APTOS, Si, or other MOVE -based Blockchain to develop a certain degree of security to ensure the security of the supply chain.
2) Function permissions.The permissions of some function calls should be carefully divided, because some key functions will involve governance, which will seriously affect the security of funds. The call for this function needs to be verified by the caller.
3) When designing and code implementation, business logic needs to pay attention to the logic problems.For example, some DEFI projects are realized by Lightning Loan, and Beosin has previously studied the MOVE version of Lightning Loan. For details, you can check the “WEB3 Technology Research | Solidity Lightning Loan Realization Method is different from MOVE and RUST Lightning Loan?”.
4) Regarding the MOVE project, the OWNER that needs to pay attention to the code when the module is upgraded is unchanged after the initial deployment, and the address of the deployer will always have upgrade permissions after deployment.
MOVE contract audit service and audit item
The Beosin Security Team has launched security audit services for MOVE smart contracts at the end of 2022, which aims to discover and assist the project party to repair the security risks in the project in advance to ensure the asset security of users and the project party.Its main security audit items include:
• Frequent vulnerabilities
• Replay attack
• Unsafe random number
• Transaction order dependencies
• Reject service
• Visit control
• Improper permissions
• Business design
• Business implementation
• Manipulated tokens price
• arbitrage attack
• GAS optimization
• Third -party module security
• Powerfulness
• Resources and safety
• Upgrade safety
• centralized risk
For details of the Beosin Move smart contract security audit service, you can view “Beosin | officially launch a security audit service for MOVE smart contracts, and from a security perspective, Move Language (Part 1)”.
In addition, Beosin launched the Move Lint static detection tool in 2023 to help developers realize
Automation discovery potential security risks in contracts, positioning the position of vulnerability, and enhance the security of the contract.For details, you can view “Beosin’s Move Lint Static Detection Tool to improve the Security of SUI Smart Contracts Development through the best practice”.
Will SUI achieve faster growth in 2024?
The MOVE smart contract language is designed to be safe and reliable to avoid vulnerabilities and security risks in some traditional smart contract languages (such as Solidity).This makes the SUI contract more credible and secure, providing users with better guarantees.
SUI began to work in 2024, paying attention to ecological development into one of its play methods. The total lock value (TVL) of SUI has reached 327 million US dollars, showing that users’ trust and participation in the project hasGrowth and continuous increase in users.In addition, SUI ranks in the top three on the non -EVM chain TVL ranking, together with other protocols such as Cetus, Navi Protocol, and Scallop Lend to jointly promote the development of the MOVE ecosystem.
Will SUI take off in 2024? We will wait and see.
