THE STARK TRUTH ABOUT DEXes - BIU · 2019. 2. 21. · DEX scalability engine We’re hiring ......
61
THE STARK TRUTH ABOUT DEXes Eli Ben-Sasson, Chief Scientist (East) | February 2019
Transcript of THE STARK TRUTH ABOUT DEXes - BIU · 2019. 2. 21. · DEX scalability engine We’re hiring ......
-
THE STARK TRUTH ABOUT DEXesEli Ben-Sasson, Chief Scientist (East) | February 2019
-
StarkWare
$40MFunding
(equity + EF grant)
20Team
members
AlphaDEX scalability
engine
We’re hiring! [email protected]
Learn more! [email protected]
-
OUTLINE
1. STARKs as a Scalability Solution
2. DEXes
3. StarkDEX
-
STARKs and Scalability
-
DELEGATED ACCOUNTABILITY
OLD WORLD(banks, pension funds…)
TRUST
VERIFY
assumption
delegated to auditors, accountants, regulators
-
DELEGATED ACCOUNTABILITY
OLD WORLD
TRUST
VERIFY
assumption
delegated to auditors, accountants, regulators
(banks, pension funds…)
don’t trust, verify TRUST
INCLUSIVE ACCOUNTABILITY
NEW WORLD
-
don’t trust, verify
everyone should be able to verify integrity of the system, using a laptop
TRUST
VERIFY
INCLUSIVE ACCOUNTABILITY
NEW WORLD
-
everyone sees every Tx
require small throughput to allow accountability even on weaker devices (i.e: laptop)
PRIVACY
SCALABILITY
INCLUSIVE ACCOUNTABILITY
2 PROBLEMS
-
everyone sees every Tx
require small throughput to include accountability on
weaker devices (i.e: laptop)
PRIVACY
SCALABILITY
shield transactions (like ZK-SNARKs do for Zcash) ZK-STARKs
S == scalability ZK-STARKs
INCLUSIVE ACCOUNTABILITY
STARK SOLVES BOTH
-
Inclusive Accountability - Scalability Problem
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
-
Computational resources threshold
Inclusive Accountability - Scalability Problem
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
-
Computational resources threshold
Inclusive Accountability - Scalability Problem
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
ON
CH
AIN
OFF
CH
AIN
Block limit
-
Computational resources threshold
STARK Scalability
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
ON
CH
AIN
OFF
CH
AIN
Block limit
Prover time is nearly linear in T
&
Verifier time exponentially smaller than T
-
Computational resources threshold
STARK Scalability
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
ON
CH
AIN
OFF
CH
AIN
Block limit
Prover time is nearly linear in T
&
Verifier time exponentially smaller than T
SCALABILITY FACTOR
VERIFIER COMPUTE / UNIT OF TIME
PROVER COMPUTE / UNIT OF TIME
-
Computational resources threshold
STARK & Other ZKP Systems
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
ON
CH
AIN
OFF
CH
AIN
Block limit
SCALABILITY FACTOR
VERIFIER COMPUTE / UNIT OF TIME
PROVER COMPUTE / UNIT OF TIME
SNARKTrusted setup scales linearly
Trusted setup, inefficient prover
Recursive SNARK
Verifier time scales linearly
BulletProof
-
DEXes and Scalability
-
Exchange: the 3-Act Play
SettlementList orders & manage order book Match-making
-
Exchange: the 3-Act Play
SettlementList orders & manage order book Match-making
-
CUSTODY
SETTLEMENT
Tx / TRADES
exchange holds all assets
off-chain
#On-chain tx’s
-
ADVANTAGES DISADVANTAGES
Total dex volume ~ 1% of total CEX volume
Transaction (settlement) cost: ~200K gas, implies upper bound of 3 tx/sec in Ethereum
DEXes
low tx volume means poor liquidity
No central honeypot luring thieves & embezzlers
DEX does not assume counterparty risk:
● No exposure to 51% attack● Faster/cheaper listing of crypto pairs
-
StarkDEX
-
OFF-C
HAIN
ON-C
HAIN
StarkDEX Overview
-
OFF-C
HAIN
ON-C
HAIN
0
Storage
Current DEXes
DEX contract
DEX
Tx1
Tx1
Tx2
Tx2
…
…
Txn
Txn
n
-
OFF-C
HAIN
ON-C
HAIN
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
Storage
0
-
OFF-C
HAIN
ON-C
HAIN
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
Storage
Tx1Tx2
0
Txn…
MR
-
OFF-C
HAIN
ON-C
HAIN
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
Storage
Proof
Verifier contractMR
0log(n)
-
OFF-C
HAIN
ON-C
HAIN
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
Storage
0
TxTx
MR
-
OFF-C
HAIN
ON-C
HAIN Storage
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
0
TxTx
Tx
MR
-
OFF-C
HAIN
ON-C
HAIN Storage
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
0
Tx
TxTx
MR
-
OFF-C
HAIN
ON-C
HAIN Storage
StarkDEX – High Level
PROVERDEX
DEX contract
Verifier contract
data
0
Tx
TxTx
MR
-
PROVERDEX
DEX contract
Verifier contract
data
Tx
Tx
Tx
-
PROVERDEX
DEX contract
Tx
Tx
Tx
-
PROVERDEX
Tx
Tx
Tx
-
PROVERDEX
Tx
Tx
Tx
-
PROVER Tx
Tx
Tx
-
PROVER Tx
Tx
Tx
-
PROVER Tx
Tx
Tx
-
PROVER
Tx
Tx
Tx
-
OFF
-CH
AIN
ON
-CH
AIN
Tx
Tx
-
OFF
-CH
AIN
ON
-CH
AIN
Tx
Bob
TX#0x32347390...325
Alice
-
PROVER
Tx
Tx
Bob
TX#0x32347390. . .325
Alice
-
PROVERBob
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
Alice
Tx
Tx
-
PROVERDEX
Bob
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
Alice
Tx
Tx
-
PROVERDEX
Bob
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
Alice
Tx
Tx
Verifier Contract
-
OFF-CHAIN
ON-CHAIN
data
PROVER
B
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
A
Tx
Tx
Verifier Contract
B
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
A B
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
AB
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
A B A
-
OFF-CHAIN
ON-CHAIN
data
PROVER
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
A
Tx
Tx
Verifier Contract
A B
MR
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
A B
-
OFF-CHAIN
ON-CHAIN
data
PROVER
D
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
C
Tx
Tx
Verifier Contract
D
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
C D
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
CD
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
C D C
-
OFF-CHAIN
ON-CHAIN
data
PROVER
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
Tx
Tx
Verifier Contract
C D
MR
T X # 0 x 3 2 3 4 7 3 9 0 . . . 3 2 5
C D
-
Verifier Contract
data
Tx
OFF-CHAIN
ON-CHAIN
PROVERPROOF
MR
-
data
Tx
OFF-CHAIN
ON-CHAIN
PROVERPROOF
MR
PROOFMR
Verifier Contract
-
Verifier Contract
data
Tx
OFF-CHAIN
ON-CHAIN
PROVERPROOFMR
0
-
data
OFF-CHAIN
ON-CHAIN
PROVER
0
Tx
Verifier ContractMR
-
Verifier Contract
data
MR
DEX
OFF-CHAIN
ON-CHAIN
0
DEX Contract
Storage
PROVER
-
data
OFF-CHAIN
ON-CHAIN
0
PROVER
Starked Dex - Tx Anatomy
Verifier ContractMR
DEX
DEX Contract
Storage
-
OFF
-CH
AIN
ON
-CH
AIN
Starked Dex - Tx Anatomy
0
data
DEX Contract
PROVER
Verifier ContractMR
DEX
Storage
-
OFF
-CH
AIN
ON
-CH
AIN
Starked Dex - Tx Anatomy
log (n)
data
DEX Contract
PROVER
Verifier Contract
DEX
Storage
MR
0
-
ONE MORE THING…
-
DEMO
Local Proof Service
Ethereum Node(Ganache) VERIFIER SMART
CONTRACTMETAMASK
WASM
browser
Big Proof Service
LOCAL LAPTOP
ON-CHAIN
OFF-CHAIN
OFF-CHAIN
-
Computational resources threshold
STARK Scalability
NETWORK THROUGHPUT (T)
CO
MP
UTA
TIO
N T
IME
ON
CH
AIN
OFF
CH
AIN
Block limitVERIFIER COMPUTE / UNIT OF TIME
PROVER COMPUTE / UNIT OF TIME
8M GAS
30
50
500>10K
-
max out @ 50 DEX Txs / Block(100K-200K gas / DEX tx)
30 DEX Txs @ 5.5M gas(180K gas / StarkDEX tx)
Current DEX StarkDEX
500 DEX Txs @ 6.7M gas(13.5K gas / StarkDEX tx)
verification on-chain can be done for over 10K txs/block
(800 gas / StarkDEX tx)
Blockchain-Bound AWS-Bound
-
THANK YOU
