MIME-Version: 1.0
From: Cloud Strife <quantumas3@gmail.com>
Date: Thu, 25 Jun 2020 17:43:20 -0400
Message-ID: <CAHeORgLcir=hZSoiDAE2hfttW71tiMNor0updmgRc2z-W-v=ow@mail.gmail.com>
To: bitcoin-dev@lists.linuxfoundation.org
Content-Type: multipart/alternative; boundary="000000000000d40dcd05a8ef7b83"
Subject: [bitcoin-dev] Bitcoin 2-way-pegged childchains via Proof of Burn
Precedence: list

--000000000000d40dcd05a8ef7b83
Content-Type: text/plain; charset="UTF-8"

Hi everyone,

I am hoping to get a critique on a proposal of how to
construct childchains "on-top" of Bitcoin without requiring any changes to
Bitcoin itself nor requiring any user or miner to be aware of them.

The childchain is Bitcoin-aware and simulates the properties of Proof of
Work by requiring continuous burning of Bitcoin in return for the fees on
the childchain.

The childchain tip is selected by highest total accumulated Bitcoin burnt
(with goal to simulate total accumulated work) for that full chained set of
childchain block commits.

The only asset on the childchain is a 2-way-peg coin that's secured in
value without oracles or collateral by requiring that each valid child
chain block must not only burn Bitcoin, but must always use a small % of
the burnt amount to deterministically reimburse withdrawals from the
childchain.

Childchain -> mainchain :: user burns the child-BTC and is added to
withdrawal queue filled as part of validity requirements by childchain
"miners" until filled 1:1 on mainchain or more. Note that occasionally
overpaying a widthdrawal does not break 1:1 peg as there's no fixed size
1:1 pool of coins necessary.

mainchain -> childchain :: user burns BTC (independent of mining
childchain) and is issued equivalent 1:1 child-BTC on the childchain

While childchains are less secure than the mainchain, both the childchain
security and the 2-way-peg accuracy might be an acceptable option for lower
value tx on scale determined by the burning rate.

Childchains would replace the need for any additional Proof of Work chains
for new blockchains to introduce any complexity (e.g. mimblewimble
childchain).

They would effectively use Proof of Work done on Bitcoin as proxy for
unforgeable costliness and benefit from Bitcoin's censorship resistance and
data availability. Large numbers of low value tx that might be priced out
of using the main chain could possibly in bulk provide enough childchain
fees combined through childchain miners to afford much higher mainchain
fees like "batching for fees".

It also has the "benefits" claimed by proof of stake like no energy
consumption without relying on internal permissions or tokens, trusted
distributions, or centralizing mechanisms like staking by simulating proof
of work. It should allow both growing the Bitcoin ecosystem and replace the
need to create alternative cryptocurrencies just to make a new blockchain.

More detailed write up available here:
https://bitcointalk.org/index.php?topic=5214173.0

I am hoping for a review if there's an overlooked issue or maybe interest
to create a proof of concept.

Thank you
-CS

--000000000000d40dcd05a8ef7b83
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><div>Hi everyone,</div><div><br></div><di=
v>I am hoping to get a critique on a proposal of how to construct=C2=A0chil=
dchains=C2=A0&quot;on-top&quot; of Bitcoin without requiring any changes to=
 Bitcoin itself nor requiring any user or miner to be aware of them.</div><=
div><br></div><div>The childchain is Bitcoin-aware and simulates the proper=
ties of Proof of Work by requiring continuous burning of Bitcoin in return =
for the fees on the childchain.<br></div><div><br></div><div>The childchain=
=C2=A0tip is selected by highest total accumulated Bitcoin burnt (with goal=
 to simulate total accumulated work) for that full chained set of childchai=
n block commits.</div><div><br></div><div>The only asset on the childchain=
=C2=A0is a 2-way-peg coin that&#39;s secured in value without oracles or co=
llateral by requiring that each valid child chain block must not only burn =
Bitcoin, but must always use a small % of the burnt amount to deterministic=
ally reimburse=C2=A0withdrawals from the childchain.</div><div><br></div><d=
iv>Childchain -&gt; mainchain :: user burns the child-BTC and is added to w=
ithdrawal queue filled as part of validity requirements by childchain &quot=
;miners&quot; until filled 1:1 on mainchain or more. Note that occasionally=
 overpaying a widthdrawal does not break 1:1 peg as there&#39;s no fixed si=
ze 1:1 pool of coins necessary.</div><div><br></div><div>mainchain -&gt; ch=
ildchain :: user burns BTC (independent of mining childchain) and is issued=
 equivalent 1:1 child-BTC on the childchain</div><div><br></div><div>While =
childchains=C2=A0are less secure than the mainchain, both the childchain se=
curity and the 2-way-peg accuracy might be an acceptable option for lower v=
alue tx on scale determined by the burning rate.=C2=A0</div><div><br></div>=
<div>Childchains would replace the need for any additional Proof of Work ch=
ains for new blockchains to introduce any complexity (e.g. mimblewimble chi=
ldchain).</div><div><br></div><div>They would effectively use Proof of Work=
 done on Bitcoin as proxy for unforgeable costliness and benefit from Bitco=
in&#39;s censorship resistance and data availability. Large numbers of low =
value tx that might be priced out of using the main chain could possibly in=
 bulk provide enough childchain fees combined through childchain miners to =
afford much higher mainchain fees like &quot;batching for fees&quot;.</div>=
<div><br></div><div>It also has the &quot;benefits&quot; claimed by proof o=
f stake like no energy consumption without relying on internal permissions =
or tokens, trusted distributions, or centralizing mechanisms like staking b=
y simulating proof of work. It should allow both growing the Bitcoin ecosys=
tem and replace the need to create alternative cryptocurrencies just to mak=
e a new blockchain.</div><div><br></div><div>More detailed write up availab=
le here:=C2=A0<a href=3D"https://bitcointalk.org/index.php?topic=3D5214173.=
0" target=3D"_blank">https://bitcointalk.org/index.php?topic=3D5214173.0</a=
>=C2=A0=C2=A0</div><div><br></div><div>I am hoping for a review if there=
9;s an overlooked issue or maybe interest to create a proof of concept.</di=
v><div><br></div><div>Thank you</div><div>-CS</div></div></div>

--000000000000d40dcd05a8ef7b83--