MIME-Version: 1.0
Date: Sat, 11 Jul 2015 01:05:25 -0700
Message-ID: <CAFdHNGg2dezj4V-i-E6dRLp99nZMQ_ErKdBo0OgQJ=9WPm90jQ@mail.gmail.com>
From: Nathan Wilcox <nathan@leastauthority.com>
To: bitcoin-dev@lists.linuxfoundation.org
Content-Type: multipart/alternative; boundary=089e01537b226fc24f051a94f373
Subject: [bitcoin-dev] SPV Mining reveals a problematic incentive issue.
Precedence: list

--089e01537b226fc24f051a94f373
Content-Type: text/plain; charset=UTF-8

Thesis: The disincentive miners have for verifying transactions is
problematic and weakens the network's robustness against forks.

According to the 2015-07-04 bitcoin.org alert [1]_ so-called "SPV Mining"
has become popular across a large portion of miners, and this enabled the
consensus-violating forks to persist. Peter Todd provides an explanation
of the incentive for SPV Mining over in another thread [2]_.

.. [1] https://bitcoin.org/en/alert/2015-07-04-spv-mining#cause

.. [2]
https://www.mail-archive.com/bitcoin-dev@lists.linuxfoundation.org/msg00404.html

If there is a cost to verifying transactions in a received block, then
there is an incentive to *not verify transactions*.  However, this is
balanced by the a risk of mining atop an invalid block.

If we imagine all miners verify all transactions, except Charlie the
Cheapskate, then it's in Charlie's interest to forego transaction
verification.  If all miners make a similar wager, then in the extreme,
no miners verify any transactions, and the expected cost of skipping
transaction verification becomes very high.

Unfortunately, it's difficult to measure how many miners are not
validating transactions, since there's no evidence of this until they
mine atop on invalid block. Because of this, I worry that over time,
more and more miners cut this particular corner, to save on costs.

If true, then the network continues to grow more brittle towards the kind
of forking-persistence behavior we saw from the July 4th (and 5th) forks.

This gets weird.  For example, a malicious miner which suspects a large
fraction of miners are neglecting transaction verification may choose to
forego a block reward by throwing an erroneous transaction into their
winning block, then, as all the "SPV Miners" run off along a worthless
chain, they can reap a higher reward rate due to controlling a larger
network capacity fraction on the valid chain.

Can we fix this?

--
Nathan Wilcox
Least Authoritarian

email: nathan@leastauthority.com
twitter: @least_nathan

Standard Disclaimer: I'm behind on dev archives, irc logs, bitcointalk,
the wiki...  if this has been discussed before I appreciate mentions of
that fact.

--089e01537b226fc24f051a94f373
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Thesis: The disincentive miners have for verifying transac=
tions is<br>problematic and weakens the network&#39;s robustness against fo=
rks.<br><br>According to the 2015-07-04 <a href=3D"http://bitcoin.org">bitc=
oin.org</a> alert [1]_ so-called &quot;SPV Mining&quot;<br>has become popul=
ar across a large portion of miners, and this enabled the<br>consensus-viol=
ating forks to persist. Peter Todd provides an explanation<br>of the incent=
ive for SPV Mining over in another thread [2]_.<br><br>.. [1] <a href=3D"ht=
tps://bitcoin.org/en/alert/2015-07-04-spv-mining#cause">https://bitcoin.org=
/en/alert/2015-07-04-spv-mining#cause</a><br><br>.. [2] <a href=3D"https://=
www.mail-archive.com/bitcoin-dev@lists.linuxfoundation.org/msg00404.html">h=
ttps://www.mail-archive.com/bitcoin-dev@lists.linuxfoundation.org/msg00404.=
html</a><br><br>If there is a cost to verifying transactions in a received =
block, then<br>there is an incentive to *not verify transactions*.=C2=A0 Ho=
wever, this is<br>balanced by the a risk of mining atop an invalid block.<b=
r><br>If we imagine all miners verify all transactions, except Charlie the<=
br>Cheapskate, then it&#39;s in Charlie&#39;s interest to forego transactio=
n<br>verification.=C2=A0 If all miners make a similar wager, then in the ex=
treme,<br>no miners verify any transactions, and the expected cost of skipp=
ing<br>transaction verification becomes very high.<br><br>Unfortunately, it=
&#39;s difficult to measure how many miners are not<br>validating transacti=
ons, since there&#39;s no evidence of this until they<br>mine atop on inval=
id block. Because of this, I worry that over time,<br>more and more miners =
cut this particular corner, to save on costs.<br><br>If true, then the netw=
ork continues to grow more brittle towards the kind<br>of forking-persisten=
ce behavior we saw from the July 4th (and 5th) forks.<br><br>This gets weir=
d.=C2=A0 For example, a malicious miner which suspects a large<br>fraction =
of miners are neglecting transaction verification may choose to<br>forego a=
 block reward by throwing an erroneous transaction into their<br>winning bl=
ock, then, as all the &quot;SPV Miners&quot; run off along a worthless<br>c=
hain, they can reap a higher reward rate due to controlling a larger<br>net=
work capacity fraction on the valid chain.<br><br>Can we fix this?<br><br>-=
-<br>Nathan Wilcox<br>Least Authoritarian<br><br>email: <a href=3D"mailto:n=
athan@leastauthority.com">nathan@leastauthority.com</a><br>twitter: @least_=
nathan<br><br>Standard Disclaimer: I&#39;m behind on dev archives, irc logs=
, bitcointalk,<br>the wiki...=C2=A0 if this has been discussed before I app=
reciate mentions of<br>that fact.<br><br></div>

--089e01537b226fc24f051a94f373--