STAKESURE: Proof of Stake Mechanisms with Strong Cryptoeconomic Safety (2401.05797v1)
Abstract: As of July 15, 2023, Ethererum, which is a Proof-of-Stake (PoS) blockchain [1] has around 410 Billion USD in total assets on chain (popularly referred to as total-value-locked, TVL) but has only 33 Billion USD worth of ETH staked in securing the underlying consensus of the chain [2]. A preliminary analysis might suggest that as the amount staked is far less (11x less) than the value secured, the Ethereum blockchain is insecure and "over-leveraged" in a purely cryptoeconomic sense. In this work, we investigate how Ethereum, or, more generally, any PoS blockchain can be made secure despite this apparent imbalance. Towards that end, we attempt to formalize a model for analyzing the cryptoeconomic safety of PoS blockchain, which separately analyzes the cost-of-corruption, the cost incurred by an attacker, and the profit-from-corruption, the profit gained by an attacker. We derive sharper bounds on profit-from-corruption, as well as new confirmation rules that significantly decrease this upper-bound. We evaluate cost-of-corruption and profit-from-corruption only from the perspective of attacking safety. Finally, we present a new "insurance" mechanism, STAKESURE, for allocating the slashed funds in a PoS system, that has several highly desirable properties: solving common information problem in existing blockchains, creating a mechanism for provably safe bridging, and providing the first sharp solution for automatically adjusting how much economic security is sufficient in a PoS system. Finally, we show that the system satisfies a notion of strong cryptoeconomic safety, which guarantees that no honest transactor ever loses money, and creates a closed system of Karma, which not only ensures that the attacker suffers a loss of funds but also that the harmed parties are sufficiently compensated.
- Vitalik Buterin. Proof ofstake. 2022.
- ultrasound.money, Accessed 2023. https://ultrasound.money/.
- Nothing-at-stake problem, Accessed 2023. https://golden.com/wiki/Nothing-at-stake_problem-639PVZA.
- Everything is a race and nakamoto always wins. In Proceedings of the 2020 ACM SIGSAC Conference on Computer and Communications Security, pages 859–878, 2020.
- Posat: proof-of-work availability and unpredictability, without the work. In Financial Cryptography and Data Security: 25th International Conference, FC 2021, Virtual Event, March 1–5, 2021, Revised Selected Papers, Part II 25, pages 104–128. Springer, 2021.
- Hotstuff: Bft consensus in the lens of blockchain. arXiv preprint arXiv:1803.05069, 2018.
- Streamlet: Textbook streamlined blockchains. In Proceedings of the 2nd ACM Conference on Advances in Financial Technologies, pages 1–11, 2020.
- The latest gossip on bft consensus. arXiv preprint arXiv:1807.04938, 2018.
- Augur: a decentralized oracle and prediction market platform. 2018.
- Kleros, Accessed 2023. https://kleros.io/whitepaper.pdf.
- P+epslion attack, Accessed 2023. https://blog.ethereum.org/2015/01/28/p-epsilon-attack.
- Weak subjectivity attack, Accessed 2023. https://blog.ethereum.org/2014/11/25/proof-stake-learned-love-weak-subjectivity.
- Analysis of Weak subjectivity in Ethereum 2.0, Accessed 2023. https://github.com/runtimeverification/beacon-chain-verification/blob/master/weak-subjectivity/weak-subjectivity-analysis.pdf.
- Responding to 51% attacks in Casper FFG, Accessed 2023. https://ethresear.ch/t/responding-to-51-attacks-in-casper-ffg/6363.
- Fraud and data availability proofs: Detecting invalid blocks in light clients. In Financial Cryptography and Data Security: 25th International Conference, FC 2021, Virtual Event, March 1–5, 2021, Revised Selected Papers, Part II 25, pages 279–298. Springer, 2021.
- Accessed 2023. https://old.reddit.com/r/ethereum/comments/rwojtk/ama_we_are_the_efs_research_team_pt_7_07_january/hrngyk8/.