Proof-of-Stake Mining Games with Perfect Randomness. Ferreira, M. V. X. & Weinberg, S. M. In Proceedings of the 22nd ACM Conference on Economics and Computation, of EC '21, pages 433–453, New York, NY, USA, 2021. Association for Computing Machinery.
Paper
Video doi abstract bibtex 155 downloads Proof-of-Stake blockchains based on a longest-chain consensus protocol are an attractive energy-friendly alternative to the Proof-of-Work paradigm. However, formal barriers to "getting the incentives right" were recently discovered, driven by the desire to use the blockchain itself as a source of pseudorandomness. We consider instead a longest-chain Proof-of-Stake protocol with perfect, trusted, external randomness (e.g. a randomness beacon). We produce two main results. First, we show that a strategic miner can strictly outperform an honest miner with just 32.8% of the total stake. Note that a miner of this size cannot outperform an honest miner in the Proof-of-Work model. This establishes that even with access to a perfect randomness beacon, incentives in Proof-of-Work and Proof-of-Stake longest-chain protocols are fundamentally different. Second, we prove that a strategic miner cannot outperform an honest miner with 30.8% of the total stake. This means that, while not quite as secure as the Proof-of-Work regime, desirable incentive properties of Proof-of-Work longest-chain protocols can be approximately recovered via Proof-of-Stake with a perfect randomness beacon. The space of possible strategies in a Proof-of-Stake mining game is significantly richer than in a Proof-of-Work game. Our main technical contribution is a characterization of potentially optimal strategies for a strategic miner, and in particular a proof that the corresponding infinite-state MDP admits an optimal strategy that is positive recurrent.
@inproceedings{ferreira2021pos,
author = {Ferreira, Matheus V. X. and Weinberg, S. Matthew},
title = {Proof-of-Stake Mining Games with Perfect Randomness},
year = {2021},
isbn = {9781450385541},
publisher = {Association for Computing Machinery},
address = {New York, NY, USA},
url = {https://arxiv.org/abs/2107.04069},
doi = {10.1145/3465456.3467636},
abstract = {Proof-of-Stake blockchains based on a longest-chain consensus protocol are an attractive energy-friendly alternative to the Proof-of-Work paradigm. However, formal barriers to "getting the incentives right" were recently discovered, driven by the desire to use the blockchain itself as a source of pseudorandomness. We consider instead a longest-chain Proof-of-Stake protocol with perfect, trusted, external randomness (e.g. a randomness beacon). We produce two main results. First, we show that a strategic miner can strictly outperform an honest miner with just 32.8% of the total stake. Note that a miner of this size cannot outperform an honest miner in the Proof-of-Work model. This establishes that even with access to a perfect randomness beacon, incentives in Proof-of-Work and Proof-of-Stake longest-chain protocols are fundamentally different. Second, we prove that a strategic miner cannot outperform an honest miner with 30.8% of the total stake. This means that, while not quite as secure as the Proof-of-Work regime, desirable incentive properties of Proof-of-Work longest-chain protocols can be approximately recovered via Proof-of-Stake with a perfect randomness beacon. The space of possible strategies in a Proof-of-Stake mining game is significantly richer than in a Proof-of-Work game. Our main technical contribution is a characterization of potentially optimal strategies for a strategic miner, and in particular a proof that the corresponding infinite-state MDP admits an optimal strategy that is positive recurrent.},
booktitle = {Proceedings of the 22nd ACM Conference on Economics and Computation},
pages = {433–453},
numpages = {21},
keywords = {proof-of-stake blockchains, energy-efficiency, NASH equilibrium, cryptocurrency, random beacons},
location = {Budapest, Hungary},
series = {EC '21},
url_Video = {https://www.youtube.com/watch?v=ZSq8-YSWGrk}
}
Downloads: 155
{"_id":"Ww9zGDuP76sXmcndy","bibbaseid":"ferreira-weinberg-proofofstakemininggameswithperfectrandomness-2021","authorIDs":["hAtXn8ziQHnefPBd7"],"author_short":["Ferreira, M. V. X.","Weinberg, S. M."],"bibdata":{"bibtype":"inproceedings","type":"inproceedings","author":[{"propositions":[],"lastnames":["Ferreira"],"firstnames":["Matheus","V.","X."],"suffixes":[]},{"propositions":[],"lastnames":["Weinberg"],"firstnames":["S.","Matthew"],"suffixes":[]}],"title":"Proof-of-Stake Mining Games with Perfect Randomness","year":"2021","isbn":"9781450385541","publisher":"Association for Computing Machinery","address":"New York, NY, USA","url":"https://arxiv.org/abs/2107.04069","doi":"10.1145/3465456.3467636","abstract":"Proof-of-Stake blockchains based on a longest-chain consensus protocol are an attractive energy-friendly alternative to the Proof-of-Work paradigm. However, formal barriers to \"getting the incentives right\" were recently discovered, driven by the desire to use the blockchain itself as a source of pseudorandomness. We consider instead a longest-chain Proof-of-Stake protocol with perfect, trusted, external randomness (e.g. a randomness beacon). We produce two main results. First, we show that a strategic miner can strictly outperform an honest miner with just 32.8% of the total stake. Note that a miner of this size cannot outperform an honest miner in the Proof-of-Work model. This establishes that even with access to a perfect randomness beacon, incentives in Proof-of-Work and Proof-of-Stake longest-chain protocols are fundamentally different. Second, we prove that a strategic miner cannot outperform an honest miner with 30.8% of the total stake. This means that, while not quite as secure as the Proof-of-Work regime, desirable incentive properties of Proof-of-Work longest-chain protocols can be approximately recovered via Proof-of-Stake with a perfect randomness beacon. The space of possible strategies in a Proof-of-Stake mining game is significantly richer than in a Proof-of-Work game. Our main technical contribution is a characterization of potentially optimal strategies for a strategic miner, and in particular a proof that the corresponding infinite-state MDP admits an optimal strategy that is positive recurrent.","booktitle":"Proceedings of the 22nd ACM Conference on Economics and Computation","pages":"433–453","numpages":"21","keywords":"proof-of-stake blockchains, energy-efficiency, NASH equilibrium, cryptocurrency, random beacons","location":"Budapest, Hungary","series":"EC '21","url_video":"https://www.youtube.com/watch?v=ZSq8-YSWGrk","bibtex":"@inproceedings{ferreira2021pos,\n author = {Ferreira, Matheus V. X. and Weinberg, S. Matthew},\n title = {Proof-of-Stake Mining Games with Perfect Randomness},\n year = {2021},\n isbn = {9781450385541},\n publisher = {Association for Computing Machinery},\n address = {New York, NY, USA},\n url = {https://arxiv.org/abs/2107.04069},\n doi = {10.1145/3465456.3467636},\n abstract = {Proof-of-Stake blockchains based on a longest-chain consensus protocol are an attractive energy-friendly alternative to the Proof-of-Work paradigm. However, formal barriers to \"getting the incentives right\" were recently discovered, driven by the desire to use the blockchain itself as a source of pseudorandomness. We consider instead a longest-chain Proof-of-Stake protocol with perfect, trusted, external randomness (e.g. a randomness beacon). We produce two main results. First, we show that a strategic miner can strictly outperform an honest miner with just 32.8% of the total stake. Note that a miner of this size cannot outperform an honest miner in the Proof-of-Work model. This establishes that even with access to a perfect randomness beacon, incentives in Proof-of-Work and Proof-of-Stake longest-chain protocols are fundamentally different. Second, we prove that a strategic miner cannot outperform an honest miner with 30.8% of the total stake. This means that, while not quite as secure as the Proof-of-Work regime, desirable incentive properties of Proof-of-Work longest-chain protocols can be approximately recovered via Proof-of-Stake with a perfect randomness beacon. The space of possible strategies in a Proof-of-Stake mining game is significantly richer than in a Proof-of-Work game. Our main technical contribution is a characterization of potentially optimal strategies for a strategic miner, and in particular a proof that the corresponding infinite-state MDP admits an optimal strategy that is positive recurrent.},\n booktitle = {Proceedings of the 22nd ACM Conference on Economics and Computation},\n pages = {433–453},\n numpages = {21},\n keywords = {proof-of-stake blockchains, energy-efficiency, NASH equilibrium, cryptocurrency, random beacons},\n location = {Budapest, Hungary},\n series = {EC '21},\n url_Video = {https://www.youtube.com/watch?v=ZSq8-YSWGrk}\n}\n\n","author_short":["Ferreira, M. V. X.","Weinberg, S. M."],"key":"ferreira2021pos","id":"ferreira2021pos","bibbaseid":"ferreira-weinberg-proofofstakemininggameswithperfectrandomness-2021","role":"author","urls":{"Paper":"https://arxiv.org/abs/2107.04069"," video":"https://www.youtube.com/watch?v=ZSq8-YSWGrk"},"keyword":["proof-of-stake blockchains","energy-efficiency","NASH equilibrium","cryptocurrency","random beacons"],"metadata":{"authorlinks":{"ferreira, m":"https://matheusvxf.github.io/publications/"}},"downloads":155,"html":""},"bibtype":"inproceedings","biburl":"https://www.dropbox.com/s/l1ow8tmixvi5lbe/publications.bib?dl=1","creationDate":"2021-02-14T04:31:44.718Z","downloads":155,"keywords":["proof-of-stake blockchains","energy-efficiency","nash equilibrium","cryptocurrency","random beacons"],"search_terms":["proof","stake","mining","games","perfect","randomness","ferreira","weinberg"],"title":"Proof-of-Stake Mining Games with Perfect Randomness","year":2021,"dataSources":["qJ67qyv982YmizPxe","6amsKw6HCrQXQWi4y"]}