Understanding Modular User Security Layer in One Article: GoPlus

Author: Biteye Core Contributor Wilson Lee

Editor: Biteye Core Contributor Crush

Community: @BiteyeCN

01. Introduction

Security is a timeless core topic in the Web3 industry. Features such as anonymity, decentralization, and Code is Law ensure absolute freedom in the crypto world, but they also allow risks like fraud and hacking to persist, leaving users without technical knowledge and on-chain experience in distress.

As the industry cycle driven mainly by ETFs, the relatively weak performance of altcoins compared to the broader market, and the wealth creation myths of projects like Bome have led more users to turn to on-chain opportunities in search of Alpha.

According to data from Token Terminal, the daily active users of major L1 blockchains have maintained historical peaks for quite some time, and the massive increase in on-chain daily active users will inevitably highlight the importance of security issues in the industry.

(Source: https://tokenterminal.com/terminal/markets/blockchains-l1)

As a leading player in the Web3 security field, GoPlus has been dedicated to safeguarding user security and has made significant progress. Its user security data usage has increased over 5000 times since 2022, with daily API calls reaching 21 million.

With the accumulation of security data and the increase in security demands, GoPlus is committed to building itself into a modular user security layer and further constructing a security ecosystem to protect Web3 security in more scenarios.

02. Products and Architecture

After long-term iterative upgrades, GoPlus has developed into a security network with a complete architecture, which can be divided into Fundamental Layers, SecWare Ecosystem, and Network Service Entrance from the bottom up. This allows GoPlus to ensure the security of its system from the ground up while building a rich developer ecosystem and achieving excellent scalability, providing users with an exceptional experience.

(Source: https://whitepaper.gopluslabs.io/goplus-network/goplus-network/architecture-overview)

Fundamental Layers

Fundamental Layers is the core of its security system and a decentralized network that includes two modules: data and computation. This ensures both the security and robustness of the GoPlus network while attracting more developers to co-build the security ecosystem without permission.

Security Data Layer: Collects, processes, and stores security-related data in a decentralized manner to ensure the integrity, authenticity, and reliability of the data.

The Security Data Layer allows any developer to join the network and provide corresponding security solutions based on users' security needs at different stages of the transaction lifecycle (such as anti-fraud, anti-phishing, and anti-MEV).

This open and permissionless feature greatly promotes the participation and collaboration of security developers, data providers, and computing node providers, allowing for upgrades of security services based on the latest security issues.

(Source: https://whitepaper.gopluslabs.io/goplus-network/goplus-network/security-data-layer)

Security Compute Layer: Responsible for executing security-related computations and validations through multiple distributed nodes, such as verifying the security analysis results of transactions, detecting potential security threats, and simulating transactions. GoPlus refers to these nodes as Security Compute Nodes (SCNs).

The Security Compute Layer achieves higher scalability, fault tolerance, and resistance to single points of failure by distributing security computing workloads across multiple nodes.

In terms of coordination and incentives among distributed nodes, GoPlus's Security Compute Layer introduces a staking mechanism and an active verification service (AVS) based on EigenLayer, ensuring fair distribution and efficient management of computing resources while enhancing the credibility of computing results through external AVS systems.

SecWare Ecosystem

GoPlus provides different segmented services (such as anti-fraud, anti-phishing, and anti-MEV) based on users' needs throughout the transaction lifecycle. These segmented services are referred to as SecWare (Security Software). The SecWare ecosystem, as the name suggests, is an intermediate layer that builds security services based on the fundamental layer and provides these services to upper-layer users.

The SecWare Protocol is the core of the SecWare ecosystem, consisting of multiple contract entities that define the interactions and relationships between users, developers, and the security services they provide.

• Creation of SecWare: Developers create SecWare instances by registering their security services (such as anti-fraud, anti-phishing, or anti-MEV) on the SecWare Protocol. The registration process involves providing basic information about the service, such as description, pricing, and service level agreements (SLA). These SecWare instances represent actual security software services on-chain, making them accessible and usable in a blockchain environment.

• User Purchase, Use, and Management: Users log into SecWareX using their wallet addresses to view their SecHub (Personal Security Center) in the background. SecHub is a control panel for users to manage security services and policies. Through SecHub, users can browse, bind, or purchase the SecWare services they need. Binding SecWare allows users to access its functionalities, while purchasing provides additional privileges or premium services. Additionally, users can configure and manage the bound SecWare security services within their SecHub, adjusting parameters for each SecWare security service and setting conditions for when the security services should take effect. This management approach enables users to customize and optimize their security strategies according to personal needs.

• Revenue and Profit Distribution: All profits generated from SecWare purchases will be pooled into a revenue pool. Developers have the right to withdraw their share of profits from the revenue pool based on the usage and performance of their SecWare.** The revenue pool automatically distributes profits to developers according to predetermined rules and SecWare performance, providing an incentive mechanism to encourage developers to create high-quality security services.

• Staking and Penalty Mechanism: To ensure the quality and reliability of SecWare and prevent malicious behavior, the SecWare protocol introduces a staking and penalty mechanism.** Developers must stake a certain amount of tokens when creating SecWare instances, which serves as a commitment to providing reliable and effective security services. If a SecWare fails to meet specific service level agreements (SLA) or is found to be malicious, a portion of the staked tokens may be forfeited as a penalty. This mechanism encourages developers to maintain high standards and comply with protocol rules.

(Source: https://whitepaper.gopluslabs.io/goplus-network/secware/secware-protocol)

At the product level, GoPlus launched SecWareX in March this year, built on the SecWare Protocol, aiming to provide comprehensive protection for users' crypto journeys.

SecWareX maximizes the advantages of the SecWare Protocol, enabling security developers to create customized security solutions for over 100 Web3 security scenarios while allowing users to access, manage, and customize these security solutions through a dedicated management dashboard, Personal SecHub, ensuring robust protection at every stage of their on-chain interactions.

Currently, SecWareX has launched four main features: multi-chain wallet scanner, personal security center, SecWare marketplace, and security task center.

• Multi-Chain Wallet Scanner: This is one of the core features of SecWareX, providing users with a comprehensive security health check for their wallets across different blockchain networks. It automatically scans wallets, assesses risks related to assets, interactions, and potential threats, and provides security scores and detailed reports to help users effectively manage and mitigate risks.

(Source: https://secwarex.io/)

• Personal Security Center (Personal SecHub): SecHub acts as a central control panel where users can bind, manage, and customize various SecWare services. It supports multi-chain configurations, allowing users to adjust security settings based on different blockchain networks, ensuring SecWare adapts to the unique characteristics and risks of each network. Additionally, SecHub provides real-time transaction notifications, security data analysis, and visual dashboards, enhancing users' security management capabilities and real-time responsiveness. Currently, GoPlus has only opened experience qualifications for the first 10,000 users.

(Source: https://secwarex.io/user)

• SecWare Marketplace: Users can discover, compare, and acquire suitable security services (SecWares) in the marketplace to enhance the protection of their assets.

(Source: https://secwarex.io/equipment)

• Security Task Center: Provides users with an engaging interactive platform with rewards, allowing them to learn, practice, and master basic security skills in a gamified experience while earning valuable incentives. The task center also rapidly disseminates security risks and threat intelligence through social media, leveraging the collective power of the community to minimize losses for a broader audience.

(Source: https://secwarex.io/)

Through these features, SecWareX not only enhances users' protection of their assets and interactions but also enables users to actively participate in the overall security building of Web3 through education and practice.

Network Service Entrance

The User Security Module (USM) serves as the Network Service Entrance, integrating GoPlus's security capabilities directly into various levels such as dApps, wallets, RPC, and chains, thus comprehensively addressing user security. USM is essentially an SDK, enabling the GoPlus network to easily connect with different levels of the ecosystem to provide security services, and it can even become one of the modules in modular blockchains and RaaS.

In ecosystems integrated with USM, user-triggered transactions are first intercepted by USM and forwarded to SecWare. Utilizing GoPlus's open security data and computing layer, SecWare conducts real-time risk assessments of transactions using advanced AI algorithms. The assessment results are sent back to USM.

(Source: https://whitepaper.gopluslabs.io/goplus-network/user-security-module/architecture-overview)

From the depth of USM's participation, its design can comprehensively address user security at different levels. Through the framework of the Web3 User Security Lifecycle (USLC), USM can provide protective measures for users at each stage of interaction:

• Pre-interaction stage: Before users begin interacting, the assessment mechanism mentioned above helps users understand potential threats.

• During interaction stage: When users generate and sign transactions, these transactions are sent to the mempool via RPC nodes and verified there. Before the transactions are verified and broadcasted, users can still use USM to intercept transactions and protect their assets.

• Post-interaction stage: After transactions are broadcasted and recorded on the ledger, USM analyzes potential residual risks from the interaction, revoking unnecessary permissions, monitoring abnormal activities, and ensuring that appropriate plans are in place to address security vulnerabilities, thus eliminating potential threats.

Through this comprehensive participation approach, USM not only provides protection at the technical level but also implements deep and seamless risk control protection at every stage of user transactions, ensuring user safety in the Web3 world.

(Source: https://whitepaper.gopluslabs.io/goplus-network/user-security-module/user-security-life-cycle)

Currently, GoPlus has also launched its own secure RPC service, SecNet, aimed at providing users with seamless and secure interaction methods.

By connecting to SecNet RPC endpoints, users can directly access the powerful security features of the GoPlus network without prior deployment. The SecNet currently announced by the team includes the Ethereum mainnet and BNB Chain.

Fundamental Layers provide a secure and trustworthy foundation for the GoPlus network, the SecWare ecosystem offers a rich array of security services for users and developers, and USM ensures that GoPlus addresses user security from multiple levels.

The security ecosystem built by GoPlus has already begun to take shape, allowing users to receive security protection from GoPlus in a comprehensive and multi-layered manner.

03. Governance and Incentive Mechanisms

The GoPlus network is essentially a decentralized platform that requires a good governance and incentive mechanism to promote positive development of the ecosystem. Key participants in the GoPlus ecosystem, such as data providers, node contributors, and SecWare developers, will collectively shape the ecosystem under this mechanism.

• Data Contributors: Responsible for providing high-quality security data to help developers and partners create effective security products and services. GoPlus has a reward system for data contributors, allowing them to earn tokens as financial compensation and enhance their reputation within the community.

• Compute Node Contributors: Provide the necessary computing power for the GoPlus network, operating reliable nodes to maintain and strengthen the network infrastructure. GoPlus also has a corresponding reward system for compute node contributors to distribute token rewards, incentivizing contributors to provide computing resources.

• SecWare Developers: Design and develop cutting-edge security services, transforming raw security data into practical tools and services, leveraging the collective computing power of the network to provide users with robust security services. In addition to earning revenue from SecWare sales, developers can also receive rewards from GoPlus-related incentive programs to ensure high-quality services.

Users are the primary source of revenue for the GoPlus ecosystem, and users must pay security gas fees each time they use SecWare security services to ensure the continuous operation of these services.

For contributors, whether SecWare developers or compute node contributors, they must stake a certain amount of tokens to the GoPlus Foundation to maintain the security and credibility of the ecosystem.

These staked tokens not only provide economic incentives to ensure participants maintain the integrity and security of the system but also serve as a security mechanism to prevent malicious activities and enhance the overall stability of the network. In GoPlus network governance, users wishing to participate in governance voting must stake tokens to gain voting weight.

The voting weight of users is directly related to the number of tokens they stake, ensuring that voters have sufficient commitment and responsibility towards the ecosystem.

Through the above mechanisms, the GoPlus network not only ensures the vitality of the ecosystem but also provides contributors and users with the motivation to participate in the growth of the ecosystem.

04. Project Progress Planning

The team has a forward-looking and detailed plan for the subsequent development of GoPlus.

Q2-Q3 2024:

• Launch of secure RPC service - GoPlus SecNet: The first version has covered Ethereum and BNB chains, allowing SecWareX users to access and experience real-time on-chain risk control on a large scale.

• Launch of SecHub: Introduce the personal security center module to provide users with various security risk preference settings, allowing personalized configuration of their security strategies.

• Opening of SecWare Protocol: Aimed at building the GoPlus network developer ecosystem, allowing more services to serve users through SecWareX; additionally, the team plans to widely open the ecosystem, allowing many interested security service companies and developers to enter the GoPlus ecosystem.

• Security gas service model: Introduce project token $GPS and energy blocks as gas for security services, thus achieving a circular economic system.

Q4 2024:

• Launch of Security Data Layer: Introduce the security data layer, allowing data contributors to become data contribution nodes by staking tokens; launch a data verification system to ensure the integrity and reliability of contributed security data.

• Release of USM: Launch the USM SDK, enabling it to be integrated into various RPCs and sorters across different chains, expanding the scale and scope of security services, which will promote partnerships for modular public chains and RaaS.

• Support for more blockchains: Expand support for a wider range of blockchains, enhancing the adaptability and compatibility of the GoPlus network in multi-chain environments.

Q1 2025:

• Launch of Security Compute Layer: Enable more developers in the GoPlus network ecosystem to deploy their services on this network and introduce incentive programs for computing layer nodes.

• Partial open-sourcing of the GoPlus security engine: Open the developer platform and Playground to promote community participation and development.

• Launch of SecWare developer platform: This will allow developers to freely and automatically develop, deploy, and publish their own SecWares.

05. Team Background

The core team members have extensive experience in both traditional cybersecurity and the crypto field. Most team members have worked in Web2 security, and some are among the earliest dApp developers in the country, with years of experience in security data.

At the same time, the team possesses a high degree of international vision, with members primarily from China, Turkey, the United States, Greece, and other countries, giving them a natural advantage in the globally-focused Web3 field.

GoPlus's investors also include many leading institutions, demonstrating the market's high recognition of it.

(Source: https://www.rootdata.com/Projects/detail/GoPlus%20Security?k=MzgxNw%3D%3D)

06. Summary and Outlook

GoPlus has achieved considerable data growth due to its strong security capabilities and quality services, indicating widespread market recognition.

As more users engage in on-chain interactions, GoPlus's role as a security guardian will become increasingly prominent, presenting both a significant opportunity and a challenge.

With the GoPlus ecosystem beginning to take shape, the positive interactions among ecosystem developers, nodes, data contributors, and users will undoubtedly lead to the continuous growth and robustness of the GoPlus ecosystem, providing users with high-quality services.

We have reason to believe that GoPlus will continue to excel in the upcoming phases, and we look forward to its future performance.