Post on 01-Feb-2021
THE STARK TRUTH ABOUT DEXesEli Ben-Sasson, Chief Scientist (East) | February 2019
StarkWare
$40MFunding
(equity + EF grant)
20Team
members
AlphaDEX scalability
engine
We’re hiring! Jobs@starkware.co
Learn more! workshop@starkware.co
mailto:jobs@starkware.comailto:jobs@starkware.co
OUTLINE
1. STARKs as a Scalability Solution
2. DEXes
3. StarkDEX
STARKs and Scalability
DELEGATED ACCOUNTABILITY
OLD WORLD(banks, pension funds…)
TRUST
VERIFY
assumption
delegated to auditors, accountants, regulators
DELEGATED ACCOUNTABILITY
OLD WORLD
TRUST
VERIFY
assumption
delegated to auditors, accountants, regulators
(banks, pension funds…)
don’t trust, verify TRUST
INCLUSIVE ACCOUNTABILITY
NEW WORLD
don’t trust, verify
everyone should be able to verify integrity of the system, using a laptop
TRUST
VERIFY
INCLUSIVE ACCOUNTABILITY
NEW WORLD
everyone sees every Tx
require small throughput to allow accountability even on weaker devices (i.e: laptop)
PRIVACY
SCALABILITY
INCLUSIVE ACCOUNTABILITY
2 PROBLEMS
everyone sees every Tx
require small throughput to include accountability on
weaker devices (i.e: laptop)
PRIVACY
SCALABILITY
shield transactions (like ZK-SNARKs do for Zcash) ZK-STARKs
S == scalability ZK-STARKs
INCLUSIVE ACCOUNTABILITY
STARK SOLVES BOTH
Inclusive Accountability - Scalability Problem
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
Computational resources threshold
Inclusive Accountability - Scalability Problem
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
Computational resources threshold
Inclusive Accountability - Scalability Problem
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
ON
CH
AIN
OFF
CH
AIN
Block limit
Computational resources threshold
STARK Scalability
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
ON
CH
AIN
OFF
CH
AIN
Block limit
Prover time is nearly linear in T
&
Verifier time exponentially smaller than T
Computational resources threshold
STARK Scalability
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
ON
CH
AIN
OFF
CH
AIN
Block limit
Prover time is nearly linear in T
&
Verifier time exponentially smaller than T
SCALABILITY FACTOR
VERIFIER COMPUTE / UNIT OF TIME
PROVER COMPUTE / UNIT OF TIME
Computational resources threshold
STARK & Other ZKP Systems
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
ON
CH
AIN
OFF
CH
AIN
Block limit
SCALABILITY FACTOR
VERIFIER COMPUTE / UNIT OF TIME
PROVER COMPUTE / UNIT OF TIME
SNARKTrusted setup scales linearly
Trusted setup, inefficient prover
Recursive SNARK
Verifier time scales linearly
BulletProof
DEXes and Scalability
Exchange: the 3-Act Play
SettlementList orders & manage order book Match-making
Exchange: the 3-Act Play
SettlementList orders & manage order book Match-making
CUSTODY
SETTLEMENT
Tx / TRADES
exchange holds all assets
off-chain
#On-chain tx’s
ADVANTAGES DISADVANTAGES
Total dex volume ~ 1% of total CEX volume
Transaction (settlement) cost: ~200K gas, implies upper bound of 3 tx/sec in Ethereum
DEXes
low tx volume means poor liquidity
No central honeypot luring thieves & embezzlers
DEX does not assume counterparty risk:
● No exposure to 51% attack● Faster/cheaper listing of crypto pairs
StarkDEX
OFF-C
HAIN
ON-C
HAIN
StarkDEX Overview
OFF-C
HAIN
ON-C
HAIN
0
Storage
Current DEXes
DEX contract
DEX
Tx1
Tx1
Tx2
Tx2
…
…
Txn
Txn
n
OFF-C
HAIN
ON-C
HAIN
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
Storage
0
OFF-C
HAIN
ON-C
HAIN
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
Storage
Tx1Tx2
0
Txn…
MR
OFF-C
HAIN
ON-C
HAIN
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
Storage
Proof
Verifier contractMR
0log(n)
OFF-C
HAIN
ON-C
HAIN
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
Storage
0
TxTx
MR
OFF-C
HAIN
ON-C
HAIN Storage
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
0
TxTx
Tx
MR
OFF-C
HAIN
ON-C
HAIN Storage
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
0
Tx
TxTx
MR
OFF-C
HAIN
ON-C
HAIN Storage
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
0
Tx
TxTx
MR
PROVERDEX
DEX contract
Verifier contract
data
Tx
Tx
Tx
PROVERDEX
DEX contract
Tx
Tx
Tx
PROVERDEX
Tx
Tx
Tx
PROVERDEX
Tx
Tx
Tx
PROVER Tx
Tx
Tx
PROVER Tx
Tx
Tx
PROVER Tx
Tx
Tx
PROVER
Tx
Tx
Tx
OFF
-CH
AIN
ON
-CH
AIN
Tx
Tx
OFF
-CH
AIN
ON
-CH
AIN
Tx
Bob
TX#0x32347390...325
Alice
PROVER
Tx
Tx
Bob
TX#0x32347390. . .325
Alice
PROVERBob
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
Alice
Tx
Tx
PROVERDEX
Bob
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
Alice
Tx
Tx
PROVERDEX
Bob
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
Alice
Tx
Tx
Verifier Contract
OFF-CHAIN
ON-CHAIN
data
PROVER
B
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
A
Tx
Tx
Verifier Contract
B
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
A B
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
AB
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
A B A
OFF-CHAIN
ON-CHAIN
data
PROVER
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
A
Tx
Tx
Verifier Contract
A B
MR
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
A B
OFF-CHAIN
ON-CHAIN
data
PROVER
D
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
C
Tx
Tx
Verifier Contract
D
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
C D
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
CD
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
C D C
OFF-CHAIN
ON-CHAIN
data
PROVER
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
Tx
Tx
Verifier Contract
C D
MR
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
C D
Verifier Contract
data
Tx
OFF-CHAIN
ON-CHAIN
PROVERPROOF
MR
data
Tx
OFF-CHAIN
ON-CHAIN
PROVERPROOF
MR
PROOFMR
Verifier Contract
Verifier Contract
data
Tx
OFF-CHAIN
ON-CHAIN
PROVERPROOFMR
0
data
OFF-CHAIN
ON-CHAIN
PROVER
0
Tx
Verifier ContractMR
Verifier Contract
data
MR
DEX
OFF-CHAIN
ON-CHAIN
0
DEX Contract
Storage
PROVER
data
OFF-CHAIN
ON-CHAIN
0
PROVER
Starked Dex - Tx Anatomy
Verifier ContractMR
DEX
DEX Contract
Storage
OFF
-CH
AIN
ON
-CH
AIN
Starked Dex - Tx Anatomy
0
data
DEX Contract
PROVER
Verifier ContractMR
DEX
Storage
OFF
-CH
AIN
ON
-CH
AIN
Starked Dex - Tx Anatomy
log (n)
data
DEX Contract
PROVER
Verifier Contract
DEX
Storage
MR
0
ONE MORE THING…
DEMO
Local Proof Service
Ethereum Node(Ganache) VERIFIER SMART
CONTRACTMETAMASK
WASM
browser
Big Proof Service
LOCAL LAPTOP
ON-CHAIN
OFF-CHAIN
OFF-CHAIN
Computational resources threshold
STARK Scalability
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
ON
CH
AIN
OFF
CH
AIN
Block limitVERIFIER COMPUTE / UNIT OF TIME
PROVER COMPUTE / UNIT OF TIME
8M GAS
30
50
500>10K
max out @ 50 DEX Txs / Block(100K-200K gas / DEX tx)
30 DEX Txs @ 5.5M gas(180K gas / StarkDEX tx)
Current DEX StarkDEX
500 DEX Txs @ 6.7M gas(13.5K gas / StarkDEX tx)
verification on-chain can be done for over 10K txs/block
(800 gas / StarkDEX tx)
Blockchain-Bound AWS-Bound
THANK YOU