Proof of Activity: Extending Bitcoin's Proof of Work via Proof of Stake Iddo Bentov∗ Charles Lee Alex Mizrahi Meni Rosenfeld Computer Science Dept., Technion Litecoin Project chromawallet.com Israeli Bitcoin Association
[email protected] [email protected] [email protected] [email protected] Abstract We propose a new protocol for a cryptocurrency, that builds upon the Bitcoin protocol by combining its Proof of Work component with a Proof of Stake type of system. Our Proof of Activity (PoA) protocol offers good security against possibly practical future attacks on Bitcoin, and has a relatively low penalty in terms of network communication and storage space. We explore various attack scenarios and suggest remedies to potential vulnerabilities of the PoA protocol, as well as evaluate the performance of its core subroutine. 1 Introduction The Bitcoin [33] cryptocurrency continues to gather success since its launch in 2009. As a means of exchange, Bitcoin facilitates fast worldwide transactions with trivial fees and without identity theft risks. As a store of value, Bitcoin entails no counterparty risk and no exposure to manipulation of the money supply by central banks, due to its decentralized nature. Many other features can be derived from Bitcoin's cryptographic foundations, including: resilient forms of secret sharing via multi-signature control over an address [13, 18], non-interactive transactions with other systems via computational integrity proofs [29], off-chain micropay- ment channels [20,36], various types of contracts that are enforced by the distributed network [18], trust-free gambling and multiparty computation [1,2,4], trust-free sale of computed data via zero-knowledge proofs [24], hierarchical wallets that use key homomorphism to minimize access to the private keys [26], decentralized stock exchange and prediction market via colored coins [12, 32], and so on.