Bitcoin

Read

<div class="cryptonews">
 <p class="is-style-lead">A new <a rel="noopener noreferrer nofollow" title="research" href="https://thebittimes.com/tag/research.html">research</a> paper titled “BitVM: Compute Anything on Bitcoin” <a rel="noopener noreferrer nofollow" title="proposes" href="https://thebittimes.com/tag/proposes.html">proposes</a> a novel method for executing complex <a rel="noopener noreferrer nofollow" title="computations" href="https://thebittimes.com/tag/computations.html">computations</a> and smart contracts on the Bitcoin network.</p>
 <p>The paper — published on Oct. 9 — suggests that users verify Bitcoin (BTC) <a rel="noopener noreferrer nofollow" title="computations" href="https://thebittimes.com/tag/computations.html">computations</a> without executing them on<a rel="noopener noreferrer nofollow" title="-chain" href="https://thebittimes.com/tag/chain.html">-chain</a>. This is done using a prover-verifier model, where the prover claims the result of a calculation, and the verifier can check if the claim is valid.</p>
 <p>The prover first compiles the program into a large binary circuit of logic gates to achieve this. They commit to this circuit bit-by-bit using cryptographic commitments in a Taproot address. The verifier can then query the prover to reveal certain parts of the circuit and check if they are consistent.</p>
 <p>The paper shows that by using cleverly constructed “challenge-response” transactions signed by both parties, the verifier can detect any false claims by the prover through a series of binary searches. This allows arbitrary computations to be verified succinctly on-chain.</p>
 <p>The key benefit of this model, called “BitVM,” is that it requires no changes to Bitcoin’s consensus rules. All the heavy lifting is done off-chain, while the on-chain footprint remains small. The paper demonstrates BitVM’s capabilities through simple logic gates but notes it can be extended to any computable function.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> You might also like: </span> Binance’s CZ expects Bitcoin to hit new all-time high in 2025
 </div>
 <p>Potential applications include verifying computational proofs for Bitcoin contracts, bridging assets across chains, hosting prediction markets directly on Bitcoin, and more. However, BitVM is limited to a two-party setting between a prover and a verifier.</p>
 <p>While more research is needed to extend BitVM for real-world use, the paper presents a promising approach to expand Bitcoin’s smart contract capabilities while retaining its security model focused on low complexity to reduce the attack surface. Still, cypherpunk and Blockstream co-founder Adam Back pointed out that this paper is not as revolutionary as it may appear to non-experts.</p>
 <blockquote class="wp-block-quote">
  <p>For people getting (over) excited, this is cool but effectively a generalization of a two-party game – it says right in the abstract – so it’s a bit like Greg Maxwell’s 2016 ZKP contingent payments implemented example</p> <cite>Adam Back, Blockstream co-founder</cite>
 </blockquote>
 <p>Despite the system cited by Back being remarkably similar, it still <a rel="noopener noreferrer nofollow" title="Category Features" href="https://thebittimes.com/features.html">Features</a> some significant differences compared to BitVM. The critical one is that Zero-Knowledge Contingent Payment (ZKCP) — proposed by renowned developer Gregory Maxwell in February 2016 — relies on zero-knowledge proofs (ZPKs), while BitVM uses fraud proofs based on hash locks and timelocks.</p>
 <p>In ZKCP, the seller uses zero-knowledge proof to prove to the buyer that they have the information the buyer wants to purchase without revealing anything about the actual data. The buyer only needs to verify the proof.</p>
 <p>In contrast, in BitVM, the prover (seller) commits to a program bit-by-bit in a large Taproot tree. The verifier (buyer) can then challenge the prover to reveal parts of the program to ensure consistency. If the prover makes a false claim, the verifier can construct a fraud proof to take their deposit.</p>
 <p>Additionally, ZKCP requires significant cryptographic overhead in generating and verifying the proofs. BitVM relies more on hashes and digital signatures, making it more lightweight.</p>
 <div class="cn-block-related-link">
  <svg class="cn-block-related-link__icon icon" aria-hidden="true"><use xlink:href="#"></use>
  </svg> <span class="cn-block-related-link__prefix"> Read more: </span> Crypto analyst calls for Bitcoin price to blast off
 </div> <span class="google-news-banner__label">Follow Us on Google News</span>
</div>
<p>Source: <a rel="noopener noreferrer nofollow" target="_blank" href="https://thebittimes.com/new-research-proposes-off-chain-computations-on-bitcoin-tbt65749.html">https://thebittimes.com/new-research-proposes-off-chain-computations-on-bitcoin-tbt65749.html</a></p>

New research proposes off-chain computations on Bitcoin

TheBitTimes

Other articles published on Oct 10, 2023

Who's Caroline Ellison, the star witness testifying against Sam Bankman-Fried?

Bitcoin price could hit $750K to $1M by 2026 — Arthur Hayes

The Future of Cryptocurrencies: Glassnode Analyst Predicts Rise in Crypto

An Introductory Guide to Decentralized Applications (dApps)

Bitmain, a maker of Bitcoin ASICs, halts staff salary payments: Report

Shiba Inu Forecasted To Rise 1,300%: Here's When

Join our free newsletter for daily crypto updates!