What Makes Satoshi's Incentive Work

9 1522
Avatar for PeterRizun
Written by
This user is who they claim to be.
We have manually verified this user via some other channel.
Proof
4 years ago

In this article, I will argue that if miners ran the network as described in the Satoshi white paper, incentives would exist to do the research and development necessary to scale bitcoin to meet demand. I will also highlight a flaw in bitcoin's consensus rules—an oversight by Satoshi—that makes it profitable for miners to deviate from his intended protocol, thus partially short-circuiting this incentive. Lastly, I will suggest adding a new rule to remedy the situation.

Run the Network, Earn New Coins

Satoshi described the steps to run the network in Section 5 of the bitcoin white paper:

Then in Section 6, he said that the first transaction in each block starts a new coin owned by the creator of the block. Those new coins, he believed, would be the incentive to run the network. The work the network would pay for would be precisely the work required to keep it running.

The Proof-of-Work Market is Proof this Incentive Works

Satoshi's incentive was an astonishing success at improving Step 3 (finding difficult proof-of-works). The original bitcoind miner had an efficiency of 0.03 Mhash/J: that is, for each Joule of energy it consumed, it could make 30,000 attempts at finding a difficult proof-of-work for its block. Today, an Antminer S19 has an efficiency of 40,000 MHash/J: for each Joule of energy it consumes, it can make 40,000,000,000 attempts at finding a proof-of-work (yes, 40 billion attempts). In just one decade, the free market made Step 3 over one million times more efficient.

There was no team of "world-class" developers leading this effort, nor was there a need for the protocol to issue new coins to a Hong Kong corporation to fund them. It didn't even require donations from early bitcoin investors. The work happened spontaneously as free people responded with ingenuity to the opportunity for profit that presented itself. The incredible six-order-of-magnitude improvement in mining technology is proof that the free market can develop mind-blowing tech when properly incentivised.

The Block-Validation Market That Should Have Been

Satoshi's incentive failed to improve Step 5 (validating new blocks). The reason is subtle because if miners ran the network as Satoshi described (i.e., if they followed Steps 1 through 6 as written above) a market for efficient block validation technology would already exist. As bitcoin usage increased, the bigger blocks would take longer to validate such that each additional second a miner spent on Step 5 (validation) before beginning Step 6 would shave about 0.17% off his potential revenue (1s/600s=0.17%). A miner with 10% of the hash power would lose ~$1M of potential revenue per year, at $10,000 per coin (BTC). And so such a miner, following Steps 1 - 6 as written, would rationally pay up to $1M per year for technology that makes Step 5 one second faster. The same economics would apply to all miners, and so combined there would be a market worth about $10 million per year per second of scaling improvement (at $10k per coin). If blocks got so big that the average miner took 11 seconds to perform Step 5, technology that would reduce that time back to 1 second would be worth up to $100M per year!

Unfortunately, this market was not to be. Instead of paying for the development of technology to scale block validation, miners realised they could increase their revenue just as much by simply not validating [1]. They realised that they could assume that the previous block was valid, without first checking what it contained, and then immediately begin mining a new block above it. Worse yet, in order for this new trick to work, the blocks needed to be empty. These validationless miners weren't really even doing the job of collecting new transactions into a block like Satoshi intended. The fact that bitcoin's consensus rules do not discourage validationless mining killed the market for efficient block validation technology, short-circuiting the built-in incentive.

To Create Demand For Efficient Block Validation Technology, Increase the Cost of Validationless Mining

To create a market for efficient block validation technology today, we must make validationless mining less profitable. One way to do this is to add a new rule requiring a hash of the UTXO set (i.e., a UTXO commitment) to be included in each new block. The commitment should be most practical to calculate by actually downloading the previous block and updating one's UTXO set [2].

Adding a new rule for UTXO commitments is already on the roadmap for BCH.

Compete On Different Implementations, and Scale to Global Levels

Imagine that new-car buyers got a fuel rebate for buying a gas guzzler, as well as a $1000 credit if they also bought the most common gas guzzler. A lot of people would buy the same gas guzzler, fuel efficiency be damned. Car companies wouldn't invest in making cars fuel efficient, because any fuel they could save their customers would be offset by the customer receiving less benefit from the gas-guzzler fuel rebate. In fact, we'd probably end up with a single car company making the same crappy gas guzzler year after year. This is the situation today in bitcoin where there is no link between how efficiently a node implementation can validate a block and the revenue a miner can earn using that node—validationless mining acts as a gas guzzler fuel rebate. (The $1000 credit for using the most common gas guzzler is analogous to the bug-for-bug compatibility miners get if they all use the same implementation.)

But with validationless mining made impractical, miners would need to acquire the best block validation technology in order to remain competitive, just as they need to acquire the most efficient proof-of-work finding technology today in order to mine profitably. A competitive market for high-performance node implementations would be born. This market would deliver the technology and optimisations necessary to build implementations of the bitcoin protocol that scale to global levels.

Cooperate On a Stable, Largely Unchanging, and Economically Rational Protocol

The protocol (the set of rules governing what constitutes a valid transaction or block) is distinct from implementations of that protocol. Competition on implementations leads to technology advancement, but for the protocol itself, stability, neutrality, and economic rationality is most important. Except for block size limits and the incentive problem described in this article, the protocol can already scale to global levels, so the need for protocol changes should be small or nil.

A special interest group (SIG) could still fund a "reference implementation" but the goals for that implementation might be very different than today. The reference implementation might serve as a reference for the behaviour defined by the protocol specification. It would focus on clarity, simplicity and adherence to the specification, not on efficiency. Efficiency improvements (and their associated complexity) would intentionally be left to free-market competition.

Conclusion

Bitcoin's current incentive system works and the six-order-of-magnitude improvements in technology for finding difficult proof-of-works proves it. The ironically-named "infrastructure funding plan" for BCH would actually reduce the number of coins available to pay for running the network's infrastructure, giving it to unaccountable third-parties instead. What is actually needed is to make validationless mining impractical, thereby creating a direct link between how efficiently a miner can validate the previous block and the amount of revenue that miner expects to earn. This would lead to a competitive market for high-performance node technology built upon a stable, largely unchanging, economically rational bitcoin protocol [3].

There is amazing technology, waiting on the sidelines, that would allow a bitcoin to scale to global levels. For example, imagine a small router-sized device capable of processing a million transactions per second on a few Watts of electricity. If that sounds crazy, would you also have thought it crazy in 2010 to hear that within a decade the technology for finding those difficult proof-of-works would be one million times better?

Notes

[1] Indeed the miner forgoes fees for the few seconds while performing validationless mining, but the previous block probably cleared out mempool anyways, so mining an empty block or a nearly empty block makes little difference to his revenue.

[2] It is probably not feasible to make validationless mining impossible, but that doesn't matter. What matters is increasing the cost of validationless mining so that it ideally costs more, but at least not significantly less, than full validation. One solution that does not appear to work is using a non-lagging version of a rolling UTXO hash method like ECMH. A validationless miner could simply assume the hash in the last block was correct and quickly update it with the single output created by his coinbase transaction in his otherwise empty block.

[3] Of course, awesome scaling tech is useless if there is only demand for 100 kB blocks. What is even more important than making validationless mining impractical is increasing demand for BCH transaction through increased adoption and new use cases.

8
$ 52.87
$ 20.01 from @Roger_Murdock
$ 20.00 from @molecular
$ 5.00 from @Read.Cash
+ 13
Avatar for PeterRizun
Written by
This user is who they claim to be.
We have manually verified this user via some other channel.
Proof
4 years ago

Comments

This seems like something that is pretty important. Would this have caused the BTC miners to want to scale BTC, or not quite?

$ 0.10
4 years ago

Haven't you been there when the debate was going on? BTC miners WANTED to scale! They WANTED to increase the block size. It was just that Bitcoin Core had captured protocol development and with many dirty tricks they actually managed to take the BTC ticker and big parts of the network effect with them.

$ 0.00
4 years ago

It seems evident in hindsight that most miners didn't understand Bitcoin well enough to defend their own interests.

If they understood Bitcoin and wanted to scale, we wouldn’t be in this predicament today.

$ 0.00
4 years ago

Hello friend, we have translated your article into Spanish so that the Spanish-speaking community can enjoy your publication, I hope you like it.

Hola amigo, hemos traducido tu artículo al español para que la comunidad de habla hispana pueda disfrutar tu publicación, espero que te guste.

https://read.cash/@Spanish-translator-community/que-hace-el-trabajo-de-incentivo-de-satoshi-at-peterrizun-e0a38fca

$ 0.00
4 years ago

Great article. I had not realised the perverse disincentive that was added from mining empty blocks based on a block header for a few seconds.

I remember the discussion that mining empty blocks increased the total pow. Indeed, rather than stopping all miners while the block was processing, worst case (or so I thought) in the meantime a new empty block was found solidifying the previous one.

I also remember the argument that the electrical system in mining warehouses would not do well going from 0 load to 100% load and back and forth. It would trip circuits or cause damage or something like that. That was back in the single sha256d days. Multiple competing chains are a way out. Let's say you were mining BCH and a block was found. Then just immediately switch all machines to mining BTC or BSV. No electrical issues and not really lost income.

However, now that you can simply mine a different chain while the old one is processing... Is there really a big incentive to optimize?

$ 0.00
4 years ago

Succinct and accurate as always, nice article.

I would like to agree for the most part, assuming there are no transaction limits, the incentive to mine empty blocks is a function of the relative risks and rewards.

I would venture that in time as the block reward diminishes the incentive to include transactions for the fee would increase and favorer the miners who don’t mine empty blocks. I’d also venture to say that limiting blocks to 1MB has stifled the market incentive to optimise for that future demand it 2 ways – artificially increasing fees, and mitigating the need to ever do it efficiently.

One could argue that it’s only in the early stages of distributing the coinbase that there exists an incentive to mine empty blocks. In a month or 2, the incentive to include transactions will be boosted by existing protocol halving rule.

While the having by design is intentional, that incentive to include transactions may just be a resulting of an unconsidered positive externality. But given it exists and demand to include more transactions is anticipated, I’d venture to say there is no need to modify the protocol to discourage such behaviours.

$ 0.00
4 years ago

Outstanding article, Peter! Just had one thought I wanted to add. Even without a protocol change of the type you describe, it's true that there exists (and will exist) some incentive for individual miners to increase validation performance, i.e., to marginally reduce orphaning risk and to enable them to earn more transaction fees (even if on only a few seconds' worth of transactions). But practically speaking, the current incentives are quite tiny. You're suggesting that we consider ways to significantly increase the incentives toward optimization and prevent (or at least disincentivize) miners from skipping step 5 and proceeding directly to step 6.

$ 2.11
4 years ago

wow

I hadn't realized the implications...

One way to do this is to add a new rule requiring a hash of the UTXO set (i.e., a UTXO commitment) to be included in each new block

you continue to rock! thanks Peter!

$ 0.00
4 years ago