Feng Yu is an assistant professor at the University of California, Santa Barbara. He obtained his Ph.D. in Computer Science from the University of Texas at Austin (UT Austin) in 2018. His research areas include blockchain security, programming languages, and formal verification. He is currently the founder and CEO of Nubit.
Since 2011, he has been engaged in formal verification research, focusing on the security of various software systems, from browsers to mobile applications. During his Ph.D. studies, he conducted in-depth research on distributed systems and security protocols, gradually realizing the immense potential of blockchain technology in building secure and decentralized systems. The management of virtual currency assets also made it a frequent target for hackers, which motivated him to dive into the Web3 field, aiming to promote the security and efficient development of the blockchain ecosystem through academic research and practical applications.
We hope to observe the development of the Web3 industry through the perspectives of entrepreneurs from global universities and to explore their experiences in the Web3 industry, providing references for university students entering Web3 for employment and entrepreneurship. In this issue, we are particularly pleased to invite Professor Feng Yu to be a guest speaker for the "OKX University Interview."
The "OKX University Interview" series is a special program produced by OKX, hosted by OKX official community ambassador Mercy (@Mercy_okx), aimed at uncovering the industry perspectives of individuals from global universities and providing references for those looking to start businesses or find jobs in Web3.
1. First, please introduce yourself briefly.
I am Feng Yu, an assistant professor at the University of California, Santa Barbara. I obtained my Ph.D. in Computer Science from the University of Texas at Austin (UT Austin) in 2018. My research areas include blockchain security, programming languages, and formal verification. I am also the founder and CEO of Nubit.
Since 2011, I have been engaged in formal verification research, focusing on the security of various software systems, from browsers to mobile applications. During my Ph.D. studies, I conducted in-depth research on distributed systems and security protocols, gradually realizing the immense potential of blockchain technology in building secure and decentralized systems. However, with the booming development of the blockchain field, the management of virtual currency assets has also made it a frequent target for hackers. For this reason, I decided to immerse myself in the Web3 field, aiming to promote the security and efficient development of the blockchain ecosystem through academic research and practical applications.
I clearly remember when I first joined UCSB in 2018, the price of Ethereum was only $80. The department chair kindly reminded me, "Little Feng, this Ethereum is going to zero, why are you researching this?" I really appreciate one aspect of the American academic community, which is the ability to maintain my own judgment regarding the suggestions of department chairs and deans (though I do not advocate being stubborn). At that time, I was passionate about technology but had no concept of coin prices and didn't even have an exchange account.
In the following three years, my doctoral students and I achieved some results in the fields of blockchain smart contracts and zero-knowledge proof security. In 2022, through my former colleague Shumo (co-founder of Manta), I met Luke from Polychain. At that time, Luke mentioned, "DeFi Summer was indeed exciting, but the frequent hacking incidents that followed have caused headaches for investors. Why don't you start a startup?" I replied, "I don't understand the process of starting a company, and I don't have funding…" He said, "We support you!" And so, I founded Veridise and officially embarked on my entrepreneurial journey in Web3.
In the early stages of entrepreneurship, friends from various sectors of the crypto world provided me with tremendous support, allowing me to move forward despite my stumbling. At the same time, with the support of the Ethereum Foundation and 0xparc, we conducted several research and product development projects on zero-knowledge circuit security and audited several leading ZK projects. However, contrary to expectations, due to inconsistent management philosophies, I decided to exit Veridise earlier this year. At that moment, my feelings were complex, as if I had given up a child I had raised, unable to protect it carefully. It was especially regrettable to see the company miss opportunities and fail to realize my ideal vision, disappointing those investors who unconditionally trusted me.
After a few weeks of adjustment, my doctoral students and I co-founded Nubit, aiming to develop the infrastructure for the data layer and execution layer for the Bitcoin ecosystem, leveraging our expertise in security. To my surprise and delight, nearly all of Veridise's investors expressed their support upon learning about my newly founded Nubit project. Even though I failed to fulfill my initial promises at Veridise, they still trusted my character, and this trust became a significant driving force for Nubit’s rapid growth. With the full support of old friends like Tekin from dao5 and Luke from Polychain, Nubit rapidly developed within just five months, completing three rounds of financing and becoming a new force in the Bitcoin ecosystem.
2. What is your view of the current state of the Web3 industry? What will be the driving forces for the industry's future development?
I believe that the current Web3 industry faces both challenges and opportunities. Although the market has experienced several rounds of cyclical fluctuations, the infrastructure and ecosystem are continuously maturing. However, there has been an increase in criticism of infrastructure projects, especially within the Ethereum ecosystem. To some extent, it is true that the entire Web3 industry has invested a significant amount of manpower and financial resources in infrastructure over the past few years. In this cycle, both infrastructure projects and the entire industry have encountered a bottleneck in large-scale applications—insufficient users. However, public opinion seems to have swung to the other extreme, questioning the role of technology and instead promoting phenomena like meme culture. Of course, some project teams do indeed raise the banner of technology but fail to deliver substantial results, leading investors and users to steer clear of overvalued infrastructure projects.
At this moment, I believe we need to maintain a clear understanding. An ancient saying goes, "History is a mirror that can reveal the rise and fall." I remember over 20 years ago when my family's small house first connected to the internet via dial-up, and the browser opened to a window filled with ads, clicking would pop up countless windows, ultimately forcing a shutdown. The internet infrastructure already existed at that time, but no one could grasp what changes it could bring to ordinary people's lives. Today, the traditional internet has profoundly changed our lives. What I want to express is that we need to adopt an open, inclusive, and dialectical attitude towards the development of this industry, giving entrepreneurs more time; perhaps in a few years, we will see the emergence of Web3's Google, Facebook, and Twitter.
Of course, I am not trying to shirk the current problems in the industry. The Web3 industry indeed faces some urgent challenges that need to be addressed, such as security, scalability, and user experience. Security is particularly critical, as vulnerabilities in blockchain systems and smart contracts can lead to severe economic losses. Some OGs believe that the current decrease in hacking incidents is due to the efforts of auditing companies, but in fact, the frequent hacking incidents in the previous cycle were precisely because of the flourishing innovations and vulnerabilities during DeFi Summer. In this cycle, many projects are only engaging in simple operations like staking, leaving hackers with little to exploit (though incidents like the bedrock hack still occur). This is also why I continue to focus on blockchain security and formal verification, aiming to enhance the security and reliability of the entire ecosystem.
Looking ahead, I believe the driving forces for the industry's development will mainly manifest in the following aspects:
1. Technological Innovation: In academia, AI technology has permeated multiple fields in just a few years, and AI + blockchain has become a hot topic in this cycle. However, there has yet to be a killer application combining AI and blockchain; some project teams use AI as a guise for meme activities. But I believe that the application of AI + blockchain will eventually materialize.
2. Security Assurance: Enhancing the security and reliability of systems through smart contract audits and formal verification.
3. User Experience: Simplifying the architecture of blockchain applications to lower the usage threshold for users and developers, promoting true large-scale applications.
4. Regulatory Compliance: A clear regulatory framework helps enhance the industry's trustworthiness and promotes healthy development.
5. Cross-Chain Interoperability: Achieving interoperability between different blockchains to break down data silos and enhance the synergistic effects of the entire ecosystem.
3. What is the proportion of students from universities choosing to enter the Web3 industry? How do you view the current talent situation in the Web3 industry?
I dare not make rash judgments about the overall trend globally, or even in North American universities (it is likely an upward trend). However, based on my observations at the University of California, Santa Barbara (UCSB), the number of students choosing to enter the Web3 industry is gradually increasing. Although I do not have specific statistical data, it is evident that students' interest in blockchain technology and decentralized applications is continuously rising, a trend that corresponds with the rise in Bitcoin prices.
To give a few simple examples, the UCSB Computer Science Department has one of the top security labs in the country, led by two legendary figures in the security field, Chris and Giovanni, whose Shellphish team consistently ranks among the top in major CTF competitions globally and in the U.S. Interestingly, when I first joined, these two professors were not optimistic about blockchain, believing it served as infrastructure for money laundering and drug trafficking, and saw no need to focus on its security issues. At that time, I quoted an ancient Chinese saying: "Water can carry a boat, but it can also capsize it." Now, over 50% of the doctoral students in their lab are engaged in blockchain security research. I believe that when facing emerging phenomena and technologies, we must maintain an open and inclusive academic attitude. Technology itself is a double-edged sword, and there is no inherent good or evil.
Regarding the current talent situation in the Web3 industry, I believe this field is in a rapid development stage, and the demand for professional talent is very strong. However, due to the relatively nascent nature of blockchain and Web3 technologies, there is still a scarcity of talent with deep knowledge and practical experience, leading to a mismatch between supply and demand in the industry. To address this situation, we are working hard to provide relevant courses and research opportunities to meet students' needs. For example, in 2019, I offered the first blockchain course at UCSB, which had only 15 students at the time. After several years of investment in research and teaching on blockchain and Web3 technologies by the school and department, the number of students in each course has stabilized at over 100. Although this growth rate does not match the volatility of cryptocurrency prices, it is still a good start.
Overall, as mentioned earlier, the entire Web3 industry is developing rapidly, but the infrastructure and talent pool (both in management and technical development) are still relatively weak compared to the traditional Web2 industry. This poses significant challenges for Web3 project teams. For example, at Nubit, we prefer to recruit engineers and managers with high professional qualities but lacking blockchain backgrounds from traditional Web2 giants (such as Google, ByteDance, Alibaba, Tencent) rather than short-term trained Web3 practitioners. After all, in any industry, the fundamental principles remain unchanged.
To address this issue, we need to continuously focus on education and training. On one hand, universities and research institutions should increase their investment in the research and teaching of blockchain and Web3 technologies to cultivate more professional talent; on the other hand, companies can help newcomers adapt to industry demands more quickly through internship programs and training plans. Overall, as the Web3 industry continues to mature, the demand for talent will continue to grow. I am confident about the future and firmly believe that through the joint efforts of all parties, the issue of talent shortage will gradually be alleviated, thereby promoting the healthy development of the entire industry.
4. What advice do you have for the younger generation about to enter the Web3 industry?
Based on my multiple experiences in research and entrepreneurship over the years, I would like to offer a few pieces of advice for your reference:
a. Solidify your technical foundation: While the thrill of making quick profits through trading cryptocurrencies is very stimulating in the short term, it is crucial for young entrepreneurs, especially those in technical development, to solidly grasp the core knowledge of computer science, particularly a deep understanding of blockchain technology, distributed systems, and cryptography. Maintain a keen awareness of the latest developments in the industry by regularly reading relevant academic papers, technical blogs, and news reports, and participating in industry conferences, seminars, and hackathons. These activities can help you stay at the forefront of technology and trends. Emphasize practice: While theory is important, practical experience is equally indispensable. Participating in open-source projects, developing decentralized applications (DApps), or deploying smart contracts on testnets are effective ways to enhance your practical skills.
b. Strengthen security awareness: Security issues in the Web3 field are particularly prominent. Learning secure coding practices and understanding common vulnerabilities and preventive measures can help you avoid major mistakes during development. As someone who has been engaged in security research for over a decade and founded a Web3 auditing company, I know that most hackers are not smarter than the average person; rather, over 80% of security incidents stem from practitioners' neglect of basic security mechanisms. Therefore, improving the security level of Web3 relies not only on developing more powerful security tools but also on raising security awareness across the entire industry.
c. Entrepreneurship is like being a person: Startups in the Web3 space generally face higher risks than those in traditional fields, and many investments ultimately turn into bubbles. Therefore, as a young founder, when you receive venture capital, it is essential to remain clear-headed, as you are essentially over-drawing the trust that investors have in you. When you are in a favorable position, do not become complacent; the speed of industry changes and the multitude of risks can often shift in an instant. When you are in a less favorable position, do not belittle yourself. Many of the hot projects from two years ago were once as obscure as you, searching for investment. Respect your peers, partners, and every employee who works hard for you, and do not sacrifice long-term vision for short-term gains.
d. Maintain a sense of hunger and an innovative spirit: Web3 technology is evolving rapidly, making it particularly important to maintain enthusiasm and the ability to learn. This does not encourage blindly chasing new technologies, but rather fostering a thirst for any new thing and technology, which can help you respond quickly when projects encounter difficulties. What I love most about Web3 is that it is a field full of opportunities that encourages innovation and entrepreneurship. No matter how unconventional the technology you hear about is, you can find its application scenarios in this industry. If you have unique ideas, try to put them into practice; you may achieve unexpected results.
e. Focus on user experience: Compared to Web2, Web3 projects still have a significant gap in user experience and stickiness. After turning off their phones or computers, people can completely disengage from Web3, but leaving traditional Web2 services like Uber, WeChat, or Amazon will impact their lives. Young entrepreneurs should not overlook user experience in their pursuit of technical solutions. Successful products require not only strong technical support but also ease of use and the ability to meet user needs. Step out of the office, communicate more with potential customers, accelerate product iteration, and timely find the product-market fit (PMF).
f. Adhere to ethics and regulations: Understand and comply with relevant laws, regulations, and ethical standards to ensure that your work promotes the healthy development of the industry.
Finally, the most important thing is to maintain your passion and curiosity for this field.
5. What significant changes are most likely to occur in the Web3 field in the next 5-10 years?
I believe that in the next five to ten years, the Web3 field may experience the following significant changes:
First, large-scale applications and mainstream adoption: As technology matures and user experience improves, Web3 applications are expected to be accepted by a broader user base. Areas such as decentralized finance (DeFi) and stablecoins will transition from niche to mainstream, expanding their influence to more industries. At the same time, traditional Web2 applications will gradually extend towards decentralization, blurring the lines between Web2 and Web3, ultimately leading to integration.
Second, cross-chain interoperability and chain abstraction: The interconnectivity between different blockchains will gradually be realized, and the development of cross-chain technology will break the isolation of various chains, allowing assets and data to flow freely across different networks, enhancing the synergistic effects of the entire ecosystem. Similar to the platform ecosystem of WeChat mini-programs, the abstraction layer of blockchain infrastructure will be further improved, enabling traditional Web2 developers to more quickly develop complex decentralized applications.
Third, the penetration of artificial intelligence and the standardization of security: Artificial intelligence will gradually penetrate the technical field of the blockchain industry, enhancing system performance, security, and the diversity of application layers. At the same time, Web3 security will move from the current "scattershot" phase towards standardization, regulating the security mechanisms of various subfields, thereby enhancing user trust in Web3 applications and promoting their wider adoption.
Fourth, the establishment of regulatory and compliance frameworks: Governments and international organizations may introduce clearer regulatory policies to provide legal protection for the Web3 industry. This will help eliminate uncertainty and attract more institutional investors and traditional enterprises into the field. Looking back at the history of internet development, twenty years ago, people were hesitant to easily share their bank card information with online services; today, even the previous generation cannot live without online payment methods like WeChat Pay.
Fifth, the key role of university talent and entrepreneurial teams: Just as Harvard nurtured Facebook, Stanford nurtured Google, and Berkeley incubated OpenAI, North American universities have played an important role in the Web2 field. Looking ahead, university talent and entrepreneurial teams in the blockchain field will also play a crucial role in the transformation of Web3. Reflecting on the development history of blockchain over the past decade, I categorize it into three stages:
• From the birth of Bitcoin in 2009 to 2021: This stage is the "wild west" era for blockchain entrepreneurial teams, where both those looking to exploit and those seriously working on projects are racing against time to establish themselves, with relatively weak infrastructure. When I first began researching smart contract security in 2017, I discussed design issues with the Solidity development lead and suggested they introduce an intermediate language (IR) layer during compilation to optimize the generated EVM bytecode. His response at the time was, "That’s a genius idea! We will do that in the next version" (which is today’s YUL). This made me realize how significant the neglect of foundational design was.
• From DeFi Summer in 2021 to 2023: This stage is a period of flourishing innovation, with various innovations emerging. At the same time, professors and research teams from North American universities gradually entered the field, and most of my peers in programming languages and formal verification have founded their own blockchain companies.
• From 2023 to the present: The industry is gradually stabilizing, and among the blockchain startups emerging in North America, founders or advisors without a university background are almost unlikely to attract the attention of investors.
Although entrepreneurial teams with university backgrounds sometimes face issues such as insufficient market adaptability and poor execution, just as integrity is the foundation of Western countries, these teams often provide the two most scarce elements for the Web3 field: bottom line and innovation. The bottom line is easy to understand; these teams are subject to strict regulation from schools and governments, and any violations may face severe repercussions; innovation is a strong suit of North American universities. This is not because professors and students are inherently more capable, but because the university environment is relatively pure, free from complex leadership relationships or external interference, allowing for a focus on research and innovation, creating a research atmosphere that encourages all-nighters and fearlessness in the face of challenges.
In summary, university talent and entrepreneurial teams will play the role of innovation engines and practical promoters in the future transformation of Web3. Their research and practice will help overcome current technical and application barriers, accelerate the popularization and maturity of Web3, and drive the entire industry towards a more open, decentralized, and trustworthy future.
Risk Warning and Disclaimer
This article is for reference only. The views expressed in this article are solely those of the author and do not represent the position of OKX. This article does not intend to provide (i) investment advice or recommendations; (ii) offers or solicitations to buy, sell, or hold digital assets; (iii) financial, accounting, legal, or tax advice. We do not guarantee the accuracy, completeness, or usefulness of such information. Holding digital assets (including stablecoins and NFTs) involves high risks and may fluctuate significantly. You should carefully consider whether trading or holding digital assets is suitable for you based on your financial situation. Please consult your legal/tax/investment professionals regarding your specific circumstances. You are solely responsible for understanding and complying with applicable local laws and regulations.
免责声明:本文章仅代表作者个人观点,不代表本平台的立场和观点。本文章仅供信息分享,不构成对任何人的任何投资建议。用户与作者之间的任何争议,与本平台无关。如网页中刊载的文章或图片涉及侵权,请提供相关的权利证明和身份证明发送邮件到support@aicoin.com,本平台相关工作人员将会进行核查。