there are some technical nuances worth mentioning, but they're well worth the tradeoffs IMO.
biggest win: regulatory. you can't access the bitcoin, so you're not a custodian. this would be massive.
inflation: ecash mint can't print more than it receives in btc. this is what hal finney did with his rPoW back in the day, but it wasn't tied to an existing currency.
reproducible builds: the mint is reproducible meaning that anyone can verify whether the version running in the enclave is malicious or not. the operator could potentially run malicious code but transparent logs would prove that the operator acted maliciously.
denial of service: this the biggest practical risk. the mint operator could simply turn it off and stop processing payments. since they can't rug the bitcoin, it doesn't really benefit the operator. if the operator used a funding source that expires, like ark, they would even risk losing their bitcoin which would disincentivize this behavior.
just to be clear: this does not reduce the risk to zero, but it does get rid of the biggest regulatory concerns which means that public organizations that can be held accountable have a realistic path for running mints without becoming custodians.
it's not a pipe dream, feasibility has been demonstrated internally. this is coming.
it's a win win win for bitcoin and bitcoiners.
Login to reply
Replies (13)
π π π
This is incredible.
this is always what I think about, Hal would fucking love this I think
π
π€― let's go!! do you have an enclave hardware stack you'd recommend for people wanting to get ready for testing?
This is a game changer for Cashu
View quoted note β
Congrats!!! π
Except if they are the ark service provider and we don't know it.
Also I think I really need to learn more about these enclaves. Is it really possible to prove that the enclave is physically unable to leak data?
Who hosts the mint server/enclave? If Putin cuts internet to it, the money is lost. That is custody of funds, even if you have no way to steal them.
please stop calling this non-custodial
Good for Monero as well.
Hey @calle β you mention Ark as a funding source that disincentivizes DoS since the operator risks losing their own bitcoin if they turn it off.
Is that the primary direction being explored for unilateral exit, or is there a broader roadmap item where token holders themselves could claim funds independently if a mint goes dark β similar to how Lightning force-close works?
Seems like the last major trust assumption to crack after the enclave model lands.
View quoted note β
View quoted note β
