Connect with us

Opinion

Bitcoin Rollups – The Rock Or The Hard Place?

Published

on



Rollups have become the narrative focus of scaling Bitcoin lately, becoming the first thing to truly “steal the limelight” from the Lightning Network in terms of wider mindshare. Rollups aim to be an off-chain layer two that is not bound or constrained by the liquidity limitations that are central to the Lightning Network, i.e. end users required someone allocate (or “lend”) them funds ahead of time in order to be able to receive money, or intermediary routing nodes requiring channel balances that can facilitate the movement of the payment amount all the way from sender to receiver.

These systems were originally developed to function on Ethereum and other Turing complete systems, but as of late the focus has shifted to porting them to UTXO based blockchains such as Bitcoin. This article is not going to discuss the current state of things being implemented on Bitcoin currently, but going to discuss the function of an idealized rollup that people are aiming for in the long term depending on features Bitcoin currently does not support, namely the ability to verify Zero Knowledge Proofs (ZKPs) on Bitcoin directly.

The basic architecture of a roll is as follows: a single account (or in Bitcoin’s case UTXO), holds the balances of all users in the rollup. This UTXO contains a commitment in the form of a merkle root of a merkle tree that commits to all the current balances of existing accounts in the rollup. All of these accounts are authorized using public/private key pairs, so in order to propose an off-chain spend a user must still sign something with a key. This part of the structure allows users to leave without permission whenever they want, simply by crafting a transaction proving their account is part of the merkle tree, they can unilaterally exit the rollup without the operator’s permission.

The operator of the rollup must include a ZKP in transactions that update the merkle root of account balances on-chain in the process of finalizing off-chain transactions, without this ZKP the transaction will be invalid and therefore not includable in the blockchain. This proof allows people to verify that all changes to off-chain accounts were properly authorized by the account holder(s), and that the operator has not conducted a malicious update of balances to steal money from users or reallocate it to other users dishonestly.

The problem is, if only the root of the merkle tree is posted on-chain where users can view and access it, how do they get their branch in the tree in order to be capable of exiting without permission when they want to?

Proper Rollups

In a proper rollup, the information is put directly into the blockchain everytime that new off-chain transactions are confirmed and the state of the rollup accounts change. Not the entire tree, that would be absurd, but the information necessary to reconstruct the tree. In a naive implementation, the summary of all existing accounts in the rollup would have balances and accounts simply added in the transaction updating the rollup.

In more advanced implementations, a balance diff is used. This is essentially a summary of what accounts have had money added to or subtracted from them during the course of an update. This allows each rollup update to only include the changes to account balances that occur. Users can then simply scan the chain and “do the math” from the beginning of the rollup to arrive at the current state of account balances, which allows them to reconstruct the merkle tree of current balances.

This saves a lot of overhead and blockspace (and therefore money) while still allowing users to guarantee access to the information needed for them to exit unilaterally. Including this data in a formal rollup that uses the blockchain to make it available to users is mandated by the rules of the rollup, i.e. a transaction that does not include the account summary or account diff is considered an invalid transaction.

Validiums

The other way to handle the problem of data availability for users to withdraw is to put the data somewhere else besides the blockchain. This introduces subtle issues, the rollup still needs to enforce that the data was made available somewhere else. Traditionally other blockchains are used for this purpose, specifically designed to function as data availability layers for systems like rollups.

This creates the dilemma of security guarantees being as strong. When the data is posted directly to the Bitcoin blockchain, consensus rules can guarantee it is correct with absolute certainty. However when it is posted to an external system, the best it can do is verify an SPV proof that the data was posted to another system.

This entails verifying an attestation that data exists on other chains, which is ultimately an oracle problem. Bitcoin’s blockchain cannot verify anything completely except what occurs on its own blockchain, the best it can do is verify a ZKP. A ZKP however cannot verify that a block containing rollup data was actually publicly broadcast after being produced. It cannot verify that external information is actually publicly available to everyone.

This opens the door to data withholding attacks, where a commitment to the data being published is created and used to advance the rollup, but the data is not actually made available. This renders users funds beyond their ability to withdraw. The only real solution to this is to depend entirely on the value and incentive structure of systems completely external to Bitcoin.

The Rock and Hard Place

This creates a dilemma in terms of rollups. When it comes to the data availability issue, there is essentially a binary choice between posting the data to the Bitcoin blockchain or somewhere else. This choice has massive implications for both rollup security and sovereignty, as well as their scalability.

On one hand, using the Bitcoin blockchain for the data availability layer introduces a hard ceiling on how much rollups can scale. There is only so much blockspace, and that puts an upper limit on how many rollups can exist at one time and how many transactions all rollups in aggregate can process off-chain. Every rollup update requires blockspace proportional to the amount of accounts that have had balance changes since the last update. Information theory only allows data to be compressed so much, and at that point there is no more potential for scaling gains.

On the other hand, using a different layer for data availability removes the hard ceiling on scalability gains, but it also introduces new security and sovereignty issues. In a rollup using Bitcoin for data availability it is literally not possible for the state of the rollup to change without the data needed by users to withdraw being atomically posted to the blockchain. With Validiums, that guarantee depends entirely on the ability of whatever external system is being used to resist gaming and data withholding.

Any block producer on the external data availability system is now capable of holding Bitcoin rollup users’ funds hostage by producing a block and not actually broadcasting it to make the data available.

So which will it be, if we ever do get to an ideal rollup implementation on Bitcoin that actually enables unilateral user withdrawal? The rock, or the hard place? 



Source link

Fractal Bitcoin

Fractal Bitcoin: A Misleading Affinity

Published

on



Fractal Bitcoin is a recently launched project that bills itself as “the only native scaling solution completely and instantly compatible with Bitcoin. In essence it is a merge mined system portraying itself as a second layer sidechain for Bitcoin, where multiple levels of “sidechains” can be stacked on top of each other. So think of a sidechain of the mainchain, a sidechain of the sidechain, a sidechain of the sidechain of the sidechain, etc. It is not.

Shitcoins Are Not Second Layers

Firstly, the entire system is built around a new native token, Fractal Bitcoin, that is issued completely independent of Bitcoin. It even comes with a massive pre-mine of 50% of the supply being split between an “ecosystem treasury”, a pre-sale, advisors, grants for the community, and developers. This is essentially the equivalent of the entire first halving period of Bitcoin when the block subsidy was 50 BTC per block. From here the network jumps to 25 Fractal Bitcoin (FB) per block.

Secondly, there is no peg mechanism for moving actual bitcoin into the “sidechain.” Yes, you read that correctly. They are framing themselves as a sidechain/layer two, but there is no actual mechanism to move your bitcoin back and forth between the mainchain and “the sidechain” Fractal Bitcoin. It is a completely independent system with no actual ability to move funds back and forth. One of the core aspects of a sidechain is the ability to peg, or “lock,” your bitcoin from the mainchain and move it into a sidechain system so that you can make use of it there, eventually moving those funds back to the mainchain.

Fractal Bitcoin has no such mechanism, and not only that, the discussion around the topic in their “technical litepaper” is completely incoherent. They discuss Discreet Log Contracts (DLCs) as a mechanism for “bridging” between different levels of Fractal sidechains. DLCs are not a suitable mechanism for a peg at all. DLCs function by pre-defining where coins will be sent based on a signature from an oracle or a set of oracles expected at a given time. They are used for gambling, financial products such as derivatives, etc. between two parties. DLCs are not designed to allow funds to be sent to any arbitrary place based on the outcome of the contract, they are designed to allocate funds to one of two participants, or proportionally to each participant, based on the outcome of some contract or event that an oracle signs off on.

This is not suitable for a sidechain or other system peg, which is ideally architected to allow any current owner of coins in the sidechain or second layer system to freely send coins to any destination they choose so long as they have valid control over them on the other system. So not only is there no functional peg mechanism for the live system, but their hand waving about potential designs for one in their litepaper is just completely incoherent.

The whole “design” is a clown show designed to pump bags for pre-mine holders.

“Cadence” Mining

Another troubling aspect of the system is its variation on merge mining, Cadence mining. The network utilizes SHA256 as the hashing algorithm, and it does support conventional Namecoin style merge mining. But there is a catch. Only one third of the blocks produced on the network are capable of being produced by Bitcoin miners engaged in merge mining. The other two thirds must be mined conventionally by miners switching their hashrate entirely over to Fractal Bitcoin.

This is a poisonous incentive structure. It essentially tries to associate itself with the Bitcoin network calling itself a “merge mined system”, when in reality two thirds of the block production mandates turning hashrate away from securing the Bitcoin network and devoting it exclusively to securing Fractal Bitcoin. Most of the retard is not capturable by miners who continue mining Bitcoin, and the greater the value of FB the greater the incentive for Bitcoin miners to defect and begin mining it instead of bitcoin to increase the share of the FB reward they capture.

It essentially functions as an incentive distortion for Bitcoin miners proportional to the value of the overall system. It also offers no advantage in terms of security at all. By forcing this choice it guarantees that most of the network difficulty must remain low enough that whatever small portion of miners find it profitable to defect from Bitcoin to FB can mine blocks at the targeted 30 second block interval. Conventional merge mining would allow the entire mining network to contribute security without having to deal with the opportunity cost of not mining Bitcoin.

What’s The Point of This?

The ostensible point of the network is to facilitate things like DeFi and Ordinals, that consume large amounts of blockspace, by giving them a system to utilize other than the mainchain. The problem with this logic is the reason those systems are built on the mainchain in the first place is because people value the immutability and security that it provides. Nothing about the architecture of Fractal Bitcoin provides the same security guarantees.

Even if they did, there is no functional pegging mechanism at all to facilitate these assets from being interoperable between the mainchain and the Fractal Bitcoin chain. The entire system is a series of handwaves past important technical details to rush something to market that allows insiders to profit off of the pre-mine involved in the launch.

No peg mechanism, an incoherent “merge mining” scheme that not only creates a poisonous incentive distortion should it continue rising in value, but actually guarantees a lower level of proof of work security, and a bunch of buzzwords. It does have CAT active, but so do testnets in existence. So even the argument as a testing ground for things built using CAT is just incoherent and a half assed rationalization for a pre-mined token pump.

Calling this a sidechain, or a layer of Bitcoin, is beyond ridiculous. It’s a token scheme, pure and simple. 



Source link

Continue Reading

Opinion

The (Zero-Knowledge Proof) Singularity Is Near

Published

on



The broader impact of proof singularity extends beyond individual blockchain networks, as it paves the way for a more interconnected and scalable Web3 ecosystem. As ZK proofs become faster and more efficient, cross-chain communication and interoperability can be greatly improved, enabling seamless, secure interactions between various blockchain protocols. This could lead to a paradigm shift where data privacy and security are inherently built into the infrastructure, fostering trust and compliance in industries that require rigorous data protection standards, such as healthcare, finance, and supply chain management.



Source link

Continue Reading

Opinion

Bitcoin’s Future in Payments: Overcoming Stablecoin Dominance with Fiatless Fiat

Published

on


Stablecoins have so far dominated the crypto payment market, but some Bitcoin developers believe there’s a proposal out there that could offer a legitimate alternative. 

Seven years ago, Dorier, a long-time developer, set out to democratize bitcoin payment processing by launching a free and open-source alternative to the then-dominant BitPay: BTCPay Server. Today, despite the project’s strong grassroots success among Bitcoin enthusiasts and online merchants, the landscape of cryptocurrency payments has evolved dramatically from when Dorier first began his journey. The rise of stablecoins has quickly dominated the space, pushing bitcoin—the world’s largest digital asset—to the sidelines in the payment processing arena.

Fueled by growing demand for stable currency options, particularly US dollars, stablecoins have swiftly taken over the cryptocurrency payments market. This surge has left many Bitcoin enthusiasts struggling to cope with the reality that these dollar-pegged assets could reinforce the very system Bitcoin was designed to challenge—the hegemony of the US dollar. As stablecoins continue to gain traction, Bitcoin promoters find themselves at a crossroads, questioning how to preserve Bitcoin’s vision of financial sovereignty in a market increasingly leaning toward stability over decentralization.

A new proposal emerging from the Lightning ecosystem has caught Dorier’s attention, and the veteran developer believes it could address this obstacle. Speaking to a packed audience at BTCPay Server’s recent annual community gathering in Riga, Dorier introduced the concept of “fiatless fiat”—a Bitcoin-native alternative to treasury-backed stablecoins like Tether and USDC.

Synthetic USD

Back in 2015, BitMEX co-founder and then-CEO Arthur Hayes outlined in a blog post how to use futures contracts to create synthetic US dollars. Although this idea never gained widespread traction, it became a popular strategy among traders seeking to hedge against bitcoin’s volatility without having to sell their underlying bitcoin positions.

For readers less familiar with financial derivatives, a synthetic dollar (or synthetic position) can be created by two parties entering a contract to speculate on the price movement of an underlying asset—in this case, bitcoin. Essentially, by taking an opposite position to their bitcoin holdings in a futures contract, traders can protect themselves from price swings without having to sell their bitcoin or rely on a US dollar instrument.

More recently, services like Blink Wallet have adopted this concept through the Stablesats protocol. Stablesats allows users to peg a portion of their bitcoin balance to a fiat currency, such as the US dollar, without converting it into traditional currency. In this model, the wallet operator acts as a “dealer” by hedging the user’s pegged balance using futures contracts on centralized exchanges. The operator then tracks the respective liabilities, ensuring that the user’s pegged balance maintains its value relative to the chosen currency. (More detailed information about the mechanism can be found on the Stablesats website.)

Obviously, this setup comes with a significant trade-off. By using Stablesats or similar services, users effectively relinquish custody of their funds to the wallet operator. The operator must then manage the hedging process and maintain the necessary contracts to preserve the synthetic peg.

Stable channels and virtual balances

In Riga, Dorier pointed out that a similar effect can be achieved between two parties using a different type of contract: Lightning channels. The idea follows recent work from Bitcoin developer Tony Klaus on a mechanism called stable channels.

Instead of relying on centralized exchanges, stable channels connect users seeking to hedge their Bitcoin exposure with ‘stability providers’ over the Lightning network. A stable channel essentially functions as a shared Bitcoin balance, where funds are allocated according to the desired exposure of the ‘stability receiver.’ Leveraging Lightning’s rapid settlement capabilities, the balance can be continuously adjusted in response to price fluctuations, with sats shifting to either side of the channel as needed to maintain the agreed distribution.

Here’s a simple chart to illustrate what the fund’s breakdown may look like over time:

credit: Tony Klaus

Clearly, this strategy entails considerable risks. As illustrated above, stability providers taking leveraged long positions on the exchange are exposed to large downside price volatility. Moreover, once the reserves of these stability providers are exhausted, users aiming to lock in their dollar-denominated value will no longer be able to absorb further price declines. While those types of rapid drawdowns are increasingly rare, Bitcoin’s volatility is always unpredictable and it’s conceivable that stability providers may look to hedge their risks in different ways.

On the other hand, the structure of this construct allows participants’ exposure within the channel to be linked to any asset. Provided both parties independently agree on a price, this can facilitate the creation of virtual balances on Lightning, enabling users to gain synthetic exposure to a variety of traditional portfolio instruments, such as stocks and commodities, assuming these assets maintain sufficient liquidity. Researcher Dan Robinson originally proposed an elaborated version of this idea under the name Rainbow Network.

The good, the bad, the ugly

The concept of “fiatless fiat” and stable channels is compelling because of its simplicity. Unlike algorithmic stablecoins that rely on complex and unsustainable economic models involving exogenous assets, the Bitcoin Dollar, as envisioned by Dorier and others, is purely the result of a voluntary, self-custodial agreement between two parties.

This distinction is critical. Stablecoins usually involve a centralized governing body overseeing a global network, while a stable channel is a localized arrangement where risk is contained to the participants involved. Interestingly, it does not even have to rely on network effects: one user can choose to receive USD-equivalent payments from another, and subsequently shift the stability contract to a different provider at their discretion. Stability provision has the potential to become a staple service from various Lightning Service Provider types of entities competing and offering different rates.

This focus on local interactions helps mitigate systemic risk and fosters an environment more conducive to innovation, echoing the original end-to-end principles of the internet.

The protocol allows for a range of implementations and use cases, tailored to different user groups, while both stability providers and receivers maintain full control over their underlying bitcoin. No third party—not even an oracle—can confiscate a user’s funds. Although some existing stablecoins offer a degree of self-custody, they by contrast remain vulnerable to censorship, with operators able to blacklist addresses and effectively render associated funds worthless.

Unfortunately, this approach also inherits several challenges and limitations inherent to self-custodial systems. Building on Lightning and payment channels introduces online requirements, which have been cited as barriers to the widespread adoption of these technologies. Because stable channels monitor price fluctuations through regular and frequent settlements, any party going offline can disrupt the maintenance of the peg, leading to potential instability. In an article further detailing his thoughts on the idea, Dorier entertains various potential solutions to a party going offline, mainly insisting that re-establishing the peg of funds already allocated to a channel “is a cheap operation.”

Another potentially viable solution to the complex management of the peg involves the creation of ecash mints, which would issue stable notes to users and handle the channel relation with the stability provider. This approach already has real-world implementations and could see more rapid adoption due to its superior user experience. The obvious tradeoff is that custodial risks are reintroduced into a system designed to eliminate them. Still, proponents of ecash argue that its strong privacy and censorship-resistant properties make it a vastly superior alternative to popular stablecoins, which are prone to surveillance and control.

Beyond this, the complexity of the Lightning protocol and the inherent security challenges posed by keeping funds at risk in “hot” channels will need careful consideration when scaling operations.

Perhaps the most pressing challenge for this technology is the dynamic nature of the peg, which may attract noncooperative actors seeking to exploit short-term, erratic price movements. Referred to as the “free-option problem,” a malicious participant could cease honoring the peg, leaving their counterparties exposed to volatility and the burden of reestablishing a peg with another provider. In a post on the developer-focused Delving Bitcoin forum, stable channel developer Tony Klaus outlines several strategies to mitigate this issue, offering potential safeguards against these types of opportunistic behaviors.

While no silver bullet exists, the emergence of a market for stability providers could potentially foster reputable counterparties whose long-term business interests will outweigh the short-term gains of defrauding users. As competition increases, these providers will have strong incentives to maintain trust and reliability, creating a more robust and dependable ecosystem for users seeking stability in their transactions.

Concluding his presentation in Riga, Dorier acknowledged the novelty of this experiment but encouraged attendees to also consider its enticing potential.

“It’s very far-fetched, it’s a new idea. It’s a new type of money. You need new business models. You need new protocols and new infrastructure. It’s something more long-term, more forward-looking.”

Users and developers interested to learn or contribute to the technology can find more information on the website or through the public Telegram channel.



Source link

Continue Reading
Advertisement [ethereumads]

Trending

    wpChatIcon