Why Nostr? What is Njump?
2023-12-25 13:18:50
in reply to

TheGuySwann on Nostr: *Colluding* with 51% of all hash power is a very different dynamic than BIP300. In ...

*Colluding* with 51% of all hash power is a very different dynamic than BIP300.

In the LN or BitVM situation where you need the justice transaction to not be censored, the attacker has to *actively* collude - like actually plan the attack, personally contact all of the relevant miners (or the pools that are ok with destroying their pool) and bribe them to participate in the attack or convince them to commit to the crime before they even get a payout. Then they all have to actively censor the justice transaction and reorg all blocks not in their censorship group when the attack happens.

In the case of BIP300, anyone with enough hash power to create a block of withdraw and cast some votes could out in a malicious withdrawal. If 60% of the miners aren’t verifying that particular sidechain (or probably not validating any of them because we’re talking gigabytes or even terabytes every 10 minutes in a successful BIP300 scaling model), then the majority of miners would just *passively* vote for the malicious transaction. They’d have no clue whether it was honest or not. No active participation. No explicit altering of the pool/client to censor a justice transaction and reorg other blocks. No collusion. No bribes necessary. When any validators of the sidechain contested it, it may very well become a social mess figuring out what is honest and what isn’t and miners have to be contacted and to force them to setup or sync sidechain nodes to cast the proper vote, or they just blindly trust to what someone else claims and manually change their vote.

Yes, 51% of the hash power control is a problem in either scenario. But in LN or ButVM, or any other justice model like we already use, the miner **is not the counterparty.** they can’t just unilaterally pay themselves out of MY channel. The BTC goes explicitly to me, or my channel partner. And *I* decide who that partner is. My trust is another layer of defense, on top of the multiple levels of difficulty and direct, malicious collusion necessary.

In the BIP300 scenario I can’t choose which miners I want to trust. And I can’t force miners to run full nodes for my sidechain. Anybody, anywhere with hash power is suddenly “my counterparty” to the sidechain operation. They can steal if they have with *passive* hash power not doing the job necessary to *contest* their claim.

These just are not at all the same dynamic nor have anywhere near the long term risks. Longer we have BIP300 success, the more likely nothing is being validated. The more BitVM and LN we have, cost of validation continues to decline. It’s all still only on the main chain.
Author Public Key
npub1h8nk2346qezka5cpm8jjh3yl5j88pf4ly2ptu7s6uu55wcfqy0wq36rpev