(dramatic music) >> Hey everyone, welcome to the special CUBEConversations here in Palo Alto, CA theCUBE Studios. I'm John Furrier, host of theCUBE, founder of SiliconANGLE Media. We are here for some exclusive news around security audits, blockchain smart contracts, and a hot new startup Amber Data we have the Chief Operating Officer Tongtong Gong who's here, Chief Operating Officer of Amber Data, great to see you! You guys, I've interviewed Shawn Douglass, the CEO, founder, before and he was really getting the technology going. Amazing progress, we have some exclusive discoveries here, welcome to theCUBE! >> Thank you, thank you, thanks for having me here. It's awesome, we've done so much in the past couple weeks, and really excited to announce that we have taken security audits, automated that to be able to provide automated at scale security audits for all the smart contracts, Ethereum, through our platform. >> This has been a huge problem, we've been covering it for the past year, with video but also in the blogs, Ethereum specifically has been the developer chain of choice, people are using Ethereum, programming on it, and that's where a lot of the DApps, decentralized apps, which we think there's going to be a tsunami of, we're a bit bullish on it, but the problem is that everyone went in and rushed with these ICO's, and they didn't think about, "Hey we better make sure our token generating event works" because they've got to do a smart contract on that, and then ultimately these marketplaces that will be emerging from these apps through the communities will be a lot of smart contracts, as the transaction of choice. This is what is the benefit of token economics. The problem is, security. The security audits have been a pain in the butt, they've been expensive, and there's been a time lag in getting it done. So you've got a time factor, too slow, too expensive, and it was last minute. >> Right. >> This has been a huge problem. Are you saying that you solved that problem? >> Yeah, kind of! So give you some stats. There are about 7.8 million to 8 million smart contracts on the chain today. On average, there's about 500-600 smart contracts get deployed every day into Mainnet Ethereum. What we've done, we talked to a lot of security teams that's in this space, and at the end of the day everybody use the same tools, set of tools, to preform security audits. What we have done, is we have programatically did that so we can run security audits on every smart contract on the chain. So we launched this feature last Friday, what we did is we picked the top 2000 smart contracts, based on transaction values-- >> On the Mainnet? >> On the Mainnet. And we preformed the audits on those, and last night, yeah three days later, we preformed all 8000 smart contracts that's been created and deployed in the past 90 days. So the top 2000 active ones, and the 8000 recently deployed ones, we preformed security audits on those. >> So this is pretty incredible, so I want to make sure I get this right. If this is the case, this is the first ever automation, or devOPS like approach to smart contract audits and security. So let me just kind of slow down if you don't mind. Today, most people will go in and manually look at code reviews or use some tooling to do that, and then they get a report. Businesses have been doing that, OSHO does that, many more do it, and they're bringing tools to the market, they are too, but I don't think anyone's actually automated at volume. So you're saying, you're automating, ingesting data from the chain-- >> Mhm. We analyze the bytecode as well as the source code to identify vulnerabilities and issues, things like integer overflow into the code, and we actually assign custom, we have our own scoring system to score basically the vulnerability exposure of the smart contract. >> Okay so I want to kind of push back on that because I'm skeptical. So, you do byte review-- >> Bytecode >> Bytecode and source code review, and then it's a black box and you type up a report, or you actually flag the code itself? Do you service it automatically? Does that happen automatically? Take me through what you do manually, and what happens with the computers. What is automated? >> Everything's automated. So we integrated the tools that every expert uses in this space today, to run the security audits on the smart contract and the bytecode and then we flag the particular source code and function calls that's flagged with the issue-- >> That's in the code itself? >> That's in the code itself, in that service, through our website, through our console, and you can actually see it. You can search on any smart contract and the console dashboard will show you the real time live streaming events of your smart contract function calls, as well as the vulnerability-- >> This is amazing. So this means that you can save a lot of time, love this feature, this is exciting. This is actually the first news I've ever hear of this, so I want to make sure I get it right. How many contracts can you do? How fast does it take? So you mentioned you've ingested last week, stuff off the chain, how many contracts was that? >> We did last week, 2000 and then up to last night, we finished 8000 smart contract scans. We're continuing to do that for every smart contract on the chain. >> How fast is this, because I remember back when I was learning how to code for the first time, back in the old days, you had to press a button, you'd have a compiler, and you'd get a bug in the line, syntax error, there it is. That's the normal kind of old school computer science. Syntax, compiler, interpreter, whatever you want to call it. It sounds like you're doing something similar, the same kind of speed. It's code review, analysis to the contracts, security through the tools... How fast is it? I mean, how long does it take to do a review of one smart contract, for instance? >> Actually, I don't know that. I would say minutes. >> Not days? >> Not days. No. Minutes. >> So it's not like it goes out, hourglass... Check your email it'll be there? It happens pretty much on the fly? >> It happens pretty much on the fly, real time. >> So how many contracts can you guys do in a day? >> We've done 8000 in three days, so... A lot! (both laughing) And we have ten machines running right now as we're speaking-- >> So you throw some clout at it, scale up-- >> Exactly, scale up. >> Scaling out is easy to do, you just go... >> Our goal is to basically make it very easy for developers to understand the state and health of their smart contract and then they can go find consultants, experts to fix those vulnerabilities and issues. >> Yeah, this is going to be a rising tide. I think, rising tide floats all boats when you have these emerging markets. You move to the next problem, and you do. Jeff Frick always says that in theCUBE and he's right! You take away security, you're now enabling this tool for these consultants to actually add more value. >> Exactly. >> Is that the focus? Do you guys even know who's going to use this tool yet? Obviously, this is a game changer. I mean, if I'm a data scientist I love this. Also I'm a trader, I might want the data, I'm a risk management, audit compliance person? I mean...you guys-- >> Yeah! At Amber Data our mission has always been providing, enabling infrastructure, enabling tool sets to allow developers, to allow operators, to allow the industry, to allow businesses to adopt blockchain, that's always been our mission and we have built the splunk, you know like search, a feature for blockchain, we have built APM, we have built dissimilar Mixpanel... It's all about providing access to data and to information, to allow everyone to have a better understanding, better transparency into the state and health of the blockchain, the state and health of their smart contracts. So that's you know, in line with-- >> So talk about the scoring thing, because okay, I love this automation I think that that's a game changer. So congratulations, this is the first I've heard of it, and I think this might be the first news in the industry out there. How does it work beyond that? What else do you guys do? Are you ingesting, are you adding overlays to it? What is the focus next? I mean, you're ingesting it, you're doing some security audits... Where does it go from there? >> So, we're actually working with the Web3 Data Foundation. So the Web3 Data Foundation is building a decentralized data marketplace to allow everyone in the ecosystem to list, subscribe, consume, distribute, monetize data assets that's generated by the blockchain and data that's on blockchain. >> So what's the URL for that? Web3... >> Web3data.org >> Three the number or three... >> Three the number, yeah. >> So web3 number data dot org? >> Yeah. >> Okay and is that an open community? Is it a foundation? >> Yes it's a nonprofit foundation, and I believe they're launching a token, Web3 Data token, and Amber Data's working with the Web3 Data foundation as a launch partner to utilize the data ingestion pipeline we have built and to serve up all the data for everyone to have access to it. >> Okay so what's your business model at Amber Data? Are you going to have your own token? Are you going to use the foundation as the token holding place? Can you just take us through the relationship of Amber Data with the foundation? I mean, I get the foundation but what you're doing here is essentially you're building IT operations into the blockchain and scaling things with automation, which certainly is only going to get better with more compute and A.I and other cool things, so I love that. How do you make money? Is it a token model? Is it just, classic, you get paid? What's the relationship? Is the foundation issuing tokens, do you have your own token? Take us through that. >> So the Web3 Data Foundation is the one issuing the token. We are the launch partner, so we are using the bulk diagnostic data ingestion pipeline that we can ingest all the data, and we're building together, building the data marketplace using smart contracts, to enable everyone to list, curate, consume, distribute, monetize the data. You think about it, right? Data on blockchain is just a fraction of the data out there. And as staff development, going on, as a trading application going on, there's a lot of data that's going to be generated by blockchain as well, and those datas aren't getting captured, analyzed, and utilized today. I think today, as a trader, investor, or as a developer, people don't have access to this data, to have data driven decisions, to help them continuously improve. Whether it's application or investment decisions. So the data marketplace will enable everyone to be able to have that access. >> And also it might enable more faster solution of decentralized applications-- >> Exactly. >> Which, Fred Kruger and I were talking on Twitter, I mean Facebook, about this, that we think that's the killer app, it's going to be the tsunami of apps coming. But all these chain problems are out there, so it's a little bit of a resetting going on in the industry. Obviously you see that with some of the pricing and funding and everything, but for the most part we see a big market coming. So I've got to ask you, the obvious question from there is, which chains are you supporting? You mentioned Mainnet which is great for Ethereum-- >> Yeah today we're supporting Ethereum Mainnet, and Rinkeby, the test net. We also support Aion's Mainnet and test net. We also support Stellar, we're working on EOS and TRON as well, so we have open sourced our data collector to allow community to contribute to that and we'll use Web3 Data Token to incentivize the community to contribute, to verify, to enrich the data. >> So I've got to ask you the security question, maybe this might be for more the nerds and the geeks, delving down in the product level, but maybe you can get it. Security is huge, so I'm skeptical. You're doing scoring, can you be hacked? What's the security answer to that? Like, whoa if she's controlling the score, I might want to spoof the code and take over and say it's okay, ya know? >> The code we get is actually on the chain, it's the code that you put on the chain, so good luck spoofing the data on the blockchain. >> That's the whole point of block chain, that's already answered. That's a dumb question, I got that. I always ask dumb questions. Alright, so what's next for you guys? How big are you guys, what's the story? I've been following you guys on Twitter and Telegram, you've been traveling a lot. What's the update on the company, what's the status? >> So we are, as a launch partner for Web3 Data Foundation, right now there's a token sale, we're in the middle of closing our presale. It's a soft offering, and we're building and expanding the team as we're speaking. >> How much are you raising on the staff, can you talk about that? >> No. >> No? Okay you don't have to say the number. Just be careful, it gets hard to raise too much. So the foundation, and you guys. Okay, I want to ask you a personal question, we love women in blockchain, I wear the "Satoshi is female" shirt as much as I can... How did you get into this? Because there's a lot of women coming into blockchain, more than people are advertising. I'm seeing a lot more women in tech, certainly a lot more women in crypto. Blockchain and crypto, you guys are doing almost a cloud devOPs serious venture here. How did you get into this, what's your story? >> I've always been a cloud girl. I started my career building Yatuzi computing, enterprise grid computing. I was 23 years old and working for Axiom in a data center in Arkansas, and I'm the only one that wears high heel6s in data center, and get stuck in a vent you know? That's my background, so it's not a far stretch to understand blockchain and the usefulness of it if you talk about distribute computing, distribute storage. So it's very natural for me, from a technology perspective, get into this space. On a personal note, I really believe in decentralization, and I believe the change it's going to make to our lives and to our offspring's lives in the future. >> It's real, you think? >> It's real. It's here to stay. >> So what's your vision of blockchain? What are people not getting? Obviously there's a lot of scams out there that have kind of tainted on the ICO side, but what are people missing? When you talk to people, you have kind of like, "Oh I get it" and people kind of of like "I don't really see that" ? What's the main thing that they're missing, what's missing? >> I think it's missing that killer Dapp to get people to realize "Oh it's actually easy to use". I don't have to think about the inner workings, and it just works. My mom still lives in Beijing, I talk to her on Skype all the time, she's not worrying about TCPIP, she's not worrying about, how is this phone call getting encrypted or not encrypted? What's my network bandwidth? She just use the phone and call me, like I'm right next to her. I think as we develop building the apps, people don't think about that they're using blockchain, they just use it. >> It's like explaining it to a parent or someone who's not technical.. "Hey how does the internet work? Can't I just "type a keyword in to the browser or a search engine?" Instead today, it's more like "Hey, you know how BGP works?" and "You know how packets move around?" It's so hard to explain, so it's got to be easier. >> Way easier, yeah. >> Totally agree, totally agree. Well Tongtong, thank you for coming on theCUBE, appreciate it, great update, exclusive news. Automation, bringing cloud computing and utility computing, real geeky stuff to the table here. This is theCUBE Conversation and I'm John Furrier. Amber Data COO, Tongtong Gong here, inside theCUBE. Thanks for watching. (dramatic music)