Demystifying incentives in the consensus computer

Loi Luu; Jason Teutsch; Raghav Kulkarni; Prateek Saxena

Paper 2015/702

Demystifying incentives in the consensus computer

Loi Luu, Jason Teutsch, Raghav Kulkarni, and Prateek Saxena

Abstract

Cryptocurrencies like Bitcoin and the more recent Ethereum system allow users to specify scripts in transactions and contracts to support applications beyond simple cash transactions. In this work, we analyze the extent to which these systems can enforce the correct semantics of scripts. We show that when a script execution requires nontrivial computation effort, practical attacks exist which either waste miners' computational resources or lead miners to accept incorrect script results. These attacks drive miners to an ill-fated choice, which we call the {\em verifier's dilemma}, whereby rational miners are well-incentivized to accept unvalidated blockchains. We call the framework of computation through a scriptable cryptocurrency a consensus computer and develop a model that captures incentives for verifying computation in it. We propose a resolution to the verifier's dilemma which incentivizes correct execution of certain applications, including outsourced computation, where scripts require minimal time to verify. Finally we discuss two distinct, practical implementations of our consensus computer in real cryptocurrency networks like Ethereum.

Metadata

Available format(s): PDF
Publication info: Published elsewhere. Minor revision. 22nd ACM Conference on Computer and Communications Security, CCS 2015
Keywords: Bitcoin Ethereum cryptocurrency incentive compatibility verifiable computation consensus computer
Contact author(s): loiluu @ comp nus edu sg
History: 2015-11-05: revised; 2015-07-14: received; See all versions
Short URL: https://ia.cr/2015/702
License: CC BY

BibTeX

@misc{cryptoeprint:2015/702,
      author = {Loi Luu and Jason Teutsch and Raghav Kulkarni and Prateek Saxena},
      title = {Demystifying incentives in the consensus computer},
      howpublished = {Cryptology {ePrint} Archive, Paper 2015/702},
      year = {2015},
      url = {https://eprint.iacr.org/2015/702}
}