Skip to content

[Review] MD-38: Provide for Native Bridge and FFS Usage with Fixed Token Supply#38

Open
l-monninger wants to merge 14 commits into
mainfrom
l-monninger/provisions-for-fixed-token-supply
Open

[Review] MD-38: Provide for Native Bridge and FFS Usage with Fixed Token Supply#38
l-monninger wants to merge 14 commits into
mainfrom
l-monninger/provisions-for-fixed-token-supply

Conversation

@l-monninger
Copy link
Copy Markdown
Contributor

@l-monninger l-monninger commented Oct 22, 2024

Summary

@l-monninger l-monninger changed the title Provide for Atomic Bridge and FFS Usage with Fixed Token Supply MD-38: Provide for Atomic Bridge and FFS Usage with Fixed Token Supply Oct 22, 2024
@ganymedio
Copy link
Copy Markdown
Contributor

ganymedio commented Oct 23, 2024

So the network has a fixed supply of MOVE? Could you link to documentation about that @l-monninger ? It's news to me. The general tokenomics and validator emissions should be included in this discussion, if there is an established design for those components. Without that information, I'm not convinced that deflationary tokenomics means the supply will converge to zero. If there is such a possibility, the mathematical evidence for it should be spelled out, to inform solution ideas.

@0xmovses
Copy link
Copy Markdown
Contributor

0xmovses commented Oct 23, 2024

@andygolay 10 billion MOVE ERC20 tokens. When gas is used it is effectively burned, on the L2, this dwindles the supply. We are currently doing 5 - 7 million transactions per day on testnet, it wouldn't take too long for the total supply to be completely burned via execution (gas).

@l-monninger
Copy link
Copy Markdown
Contributor Author

@andygolay Yes, but his MD requests generally how to supply that.

The statement about deflationary token going to zero is not about deflationary tokens in general. It is about the particular case where you are simply burning gas in a gas algebra that does not work on fractions of the total circulation. You will deflate and then eventually reach 0 simply because you are taking money out of the system in amounts that are not asymptotic and you are not adding any token back. The formalization is trivial and algebraic $T - g \dot n \leq 0 \iff n > \frac{T}{g}$ where $T \in \mathbb{R}$ is total supply $g \in \mathbb{R}$ is average gas per transaction and $n \in \mathbb{N}$ is the number of transactions haha

@ganymedio
Copy link
Copy Markdown
Contributor

ganymedio commented Oct 24, 2024

According to a recent activity (only a month, more data would be better but this gives a rough idea) it looks like gas consumption is currently somewhere about 2000 MOVE per day:

image

10 billion / 2 thousand = 5 million days or a little over 13,698 years worth of MOVE left.

Even at 5000 MOVE per day burned, we have 2 million days or 5,479 years remaining.

We shouldn't expect this specific blockchain to last more than a few hundred years, so maybe I'm being totally naive but I don't see the gas depletion issue being urgent even if we are emitting many tens of thousands of MOVE per day.

To achieve crypto-economically secured Fast-Finality, we need to solve the following problems:

  1. design a staking mechanism for the validators to stake assets, distribute rewards and manage slashing

Could we engineer the reward amount to have the supply deplete so slowly that we're practically guaranteed a few hundred years, say 300 years worth of MOVE supply? This would mean we can burn about 33 million MOVE per year, or a little over 91,000 MOVE per day.

@franck44
Copy link
Copy Markdown
Contributor

When gas is used it is effectively burned,

I don't think this is true. The gas fees are transferred to the operator for them to be dispatched to the sequencer, executor and DA and L1 (root hash) transaction fees.

I don't understand what "effectively" means here.

@l-monninger
Copy link
Copy Markdown
Contributor Author

@franck44

I don't think this is true. The gas fees are transferred to the operator for them to be dispatched to the sequencer, executor and DA and L1 (root hash) transaction fees.

I don't understand what "effectively" means here.

I believe he's referring to the case where nothing is implemented for this transfer, as is the subject of this MD.

@apenzk apenzk changed the title MD-38: Provide for Atomic Bridge and FFS Usage with Fixed Token Supply [Review] MD-38: Provide for Atomic Bridge and FFS Usage with Fixed Token Supply Oct 28, 2024
@apenzk
Copy link
Copy Markdown
Contributor

apenzk commented Oct 28, 2024

can someone link me to the reason why

  • the L1MOVE =/= L1-bridge-token
  • the L2MOVE = Move Gas token =/= L2-bridge-token

@l-monninger
Copy link
Copy Markdown
Contributor Author

can someone link me to the reason why

  • the L1MOVE =/= L1-bridge-token
  • the L2MOVE = Move Gas token =/= L2-bridge-token

This MD does not strictly require that. But, numerous points have been made about why this is potentially dangerous here: #20

There are three key points:

  1. Fallible bridge means if compromised in L2 direction, sybil resistance deteriorates.
  2. Fallible bridge means if compromised in L1 direction, staking costs are lessened.
  3. Fallible bridge means any failure breaks fixed supply requirement.

@l-monninger l-monninger requested a review from apenzk as a code owner October 29, 2024 07:31
@apenzk
Copy link
Copy Markdown
Contributor

apenzk commented Oct 29, 2024

  • Fallible bridge means if compromised in L2 direction, sybil resistance deteriorates.
  • Fallible bridge means if compromised in L1 direction, staking costs are lessened.
  • Fallible bridge means any failure breaks fixed supply requirement.

it looks like that all these points are still true for the bridge+DEX design. see
https://github.com/movementlabsxyz/MIP/pull/20/files#r1820933114

Comment thread MD/md-38/README.md Outdated
![Fixed Supply Rewarding Problem](./fixed-supply-rewarding-problem.png)


Using Fast Finality Settlement with the Atomic Bridge presents a challenge when the token supply is fixed.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
Using Fast Finality Settlement with the Atomic Bridge presents a challenge when the token supply is fixed.
Entertaining different tokens on Layer 1 (L1) and Layer 2 (L2), keeping their added-up supply constant while using the L2-token for fee payment introduces challenges.

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The mention of FFS confused the context, i put it further down

Comment thread MD/md-38/README.md Outdated
Comment thread MD/md-38/README.md Outdated
Comment thread MD/md-38/README.md

Users of the Movement SDK should be **informed of different approaches and trade-offs when using the Atomic Bridge and Fast Finality Settlement with a fixed token supply.** This document provides an initial conceptual framing towards that end.

This document also seeks a response to the concerns raised in [MD-20](https://github.com/movementlabsxyz/MIP/pull/20).
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
This document also seeks a response to the concerns raised in [MD-20](https://github.com/movementlabsxyz/MIP/pull/20).
This document also seeks a response to the concerns raised in the withdrawn [MD-20](https://github.com/movementlabsxyz/MIP/pull/20).

Comment thread MD/md-38/README.md Outdated

### D2: Provide Staged Approaches for Networks Building on the Atomic Bridge and Fast Finality Settlement

**User Journey**: Developers can reference approaches spawned from these desiderata to understand how to build networks using the Atomic Bridge and Fast Finality Settlement with a fixed token supply **in stages.** For example, developers can initially roll out a network using the **"Free Execution" approach and then transition to the "Noble Attester"** approach and so on. Some formats may be more suitable for certain stages of network development and release than others.
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
**User Journey**: Developers can reference approaches spawned from these desiderata to understand how to build networks using the Atomic Bridge and Fast Finality Settlement with a fixed token supply **in stages.** For example, developers can initially roll out a network using the **"Free Execution" approach and then transition to the "Noble Attester"** approach and so on. Some formats may be more suitable for certain stages of network development and release than others.
**User Journey**: Developers can reference usage approaches spawned from these desiderata to understand how to build networks using the Atomic Bridge and Fast Finality Settlement with a fixed token supply **in stages.** For example, developers can initially roll out a network using the **"Free Execution" approach** and then transition to the **"Acceptor" approach** (a volunteer attester, see [MIP-34](https://github.com/movementlabsxyz/MIP/pull/34)), and so on. Some formats may be more suitable for certain stages of network development and release than others.

Comment thread MD/md-38/README.md
| Name | Description | Gas Destination | Reward Form | Challenges |
|-------------------|---------------------------------------|-----------------------|----------------------|-------------------------------------|
| **Decoupled** | • Gas spent on the L2 deposited to pools on the L2. <br> • Rewards on the L1 are issued in a LP token which is demurrage. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | FFS LP Token; voucher periods can be assigned. | • LP Token's demurrage assigns a lifetime to the viability of the settlement protocol which will require a new or asymptotic token voucher or token generation event at some point. |
| **Trickle-back** | • Gas spent on the L2 recirculates to pools on the L2. <br> • Rewards are provided on the L2 for bridging back to the L1 at the address of the FFS LP Token. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | Staking Token | • Rewards for pool providers to bridge back to the L1 at the address of the FFS LP Token need to be sufficient. <br> • Pool providers likely need to have only custodial access to token, otherwise intended rewarding game theory would likely be intractable. |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Staking token is not defined - at least there should be a reference to the relevant document

Comment thread MD/md-38/README.md
| **Decoupled** | • Gas spent on the L2 deposited to pools on the L2. <br> • Rewards on the L1 are issued in a LP token which is demurrage. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | FFS LP Token; voucher periods can be assigned. | • LP Token's demurrage assigns a lifetime to the viability of the settlement protocol which will require a new or asymptotic token voucher or token generation event at some point. |
| **Trickle-back** | • Gas spent on the L2 recirculates to pools on the L2. <br> • Rewards are provided on the L2 for bridging back to the L1 at the address of the FFS LP Token. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | Staking Token | • Rewards for pool providers to bridge back to the L1 at the address of the FFS LP Token need to be sufficient. <br> • Pool providers likely need to have only custodial access to token, otherwise intended rewarding game theory would likely be intractable. |
| **Settle with Gas** | • The settlement messages include the amount of gas spent. The LP for the FFS claims token locked in the L1 bridge. <br> • Bridge may still benefit from intermediary tokens. | FFS LP Token | Staking Token | • Unclear how to handle forks. <br> • Centralization remains as FFS contract needs to have capability to claim token locked in L1 bridge. However, this can be governed on-chain in this case. <br> • Intermediary tokens can still help reduce attack surface via the bridge. Now attacks would likely focus on exploiting capabilities of the settlement contract to unlock token. |
| **Noble Gasmaster** | • A trusted signer is responsible for successfully relaying gas spent. The use of intermediary tokens in the bridge is moot. | FFS LP Token | Staking Token | • Centralized signer. |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

similar to the "acceptor" is there a way how any validator can be permitted to transfer L2 pool tokens to the L1 reward contract? (at the cost of L2fees and L1fees for that validator)?

Similar to the Acceptor model, a L1-selected acceptor could be responsible for transferring rewards from L2 to L1, and get rewarded on L1 for this, however a volunteer could transfer also the L2RewardPool balance to the L1RewardPool balance (at their own cost)

Comment thread MD/md-38/README.md


## Overview
![Fixed Supply Rewarding Problem](./fixed-supply-rewarding-problem.png)
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • this figure is displayed without any description or context. it is not referenced in the text anywhere.
  • at no point burning is mentioned in this file
  • There is no reference to the model that describes the DEX approach. also for the sake of this MD and the description of the burn problem the DEX is not necessary. I suggest to add a figure that has a simple direct bridge from L1MOVE <> L2MOVE, and where L2MOVE is the gas. Such a model seems to be minimal yet envelop the problem sufficiently.

Comment thread MD/md-38/README.md
|-------------------|---------------------------------------|-----------------------|----------------------|-------------------------------------|
| **Decoupled** | • Gas spent on the L2 deposited to pools on the L2. <br> • Rewards on the L1 are issued in a LP token which is demurrage. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | FFS LP Token; voucher periods can be assigned. | • LP Token's demurrage assigns a lifetime to the viability of the settlement protocol which will require a new or asymptotic token voucher or token generation event at some point. |
| **Trickle-back** | • Gas spent on the L2 recirculates to pools on the L2. <br> • Rewards are provided on the L2 for bridging back to the L1 at the address of the FFS LP Token. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | Staking Token | • Rewards for pool providers to bridge back to the L1 at the address of the FFS LP Token need to be sufficient. <br> • Pool providers likely need to have only custodial access to token, otherwise intended rewarding game theory would likely be intractable. |
| **Settle with Gas** | • The settlement messages include the amount of gas spent. The LP for the FFS claims token locked in the L1 bridge. <br> • Bridge may still benefit from intermediary tokens. | FFS LP Token | Staking Token | • Unclear how to handle forks. <br> • Centralization remains as FFS contract needs to have capability to claim token locked in L1 bridge. However, this can be governed on-chain in this case. <br> • Intermediary tokens can still help reduce attack surface via the bridge. Now attacks would likely focus on exploiting capabilities of the settlement contract to unlock token. |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • what means "the LP for the FFS claims token locked in the the L1 bridge"
  • "The settlement messages include the amount of gas spent." i assume you mean L2gas? i think we should clearly distinguish the gas kinds.. postconfirmers have L1gas cost but earn parts of the L2gas

Comment thread MD/md-38/README.md
| **Trickle-back** | • Gas spent on the L2 recirculates to pools on the L2. <br> • Rewards are provided on the L2 for bridging back to the L1 at the address of the FFS LP Token. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | Staking Token | • Rewards for pool providers to bridge back to the L1 at the address of the FFS LP Token need to be sufficient. <br> • Pool providers likely need to have only custodial access to token, otherwise intended rewarding game theory would likely be intractable. |
| **Settle with Gas** | • The settlement messages include the amount of gas spent. The LP for the FFS claims token locked in the L1 bridge. <br> • Bridge may still benefit from intermediary tokens. | FFS LP Token | Staking Token | • Unclear how to handle forks. <br> • Centralization remains as FFS contract needs to have capability to claim token locked in L1 bridge. However, this can be governed on-chain in this case. <br> • Intermediary tokens can still help reduce attack surface via the bridge. Now attacks would likely focus on exploiting capabilities of the settlement contract to unlock token. |
| **Noble Gasmaster** | • A trusted signer is responsible for successfully relaying gas spent. The use of intermediary tokens in the bridge is moot. | FFS LP Token | Staking Token | • Centralized signer. |
| **Free Execution** | • Execution does not charge gas fees, meaning gas token stays in circulation and supply does not change. | Nowhere | Staking Token or FFS LP Token | • No sybil resistance; not suitable for anything but promotional or initial stages of a network. <br> Gas fees do not contribute to rewards, so rewards rely solely on initial grant and perhaps LP. Execution does not have cost in token and so cannot drive work-based benefits in token. |
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

need a reference to a MD / MIP that exlpains Staking Token and FFS LP Token

l-monninger and others added 5 commits November 5, 2024 10:07
Co-authored-by: Andreas Penzkofer <36140574+apenzk@users.noreply.github.com>
Co-authored-by: Andreas Penzkofer <36140574+apenzk@users.noreply.github.com>
Co-authored-by: Andreas Penzkofer <36140574+apenzk@users.noreply.github.com>
Co-authored-by: Andreas Penzkofer <36140574+apenzk@users.noreply.github.com>
Comment thread MD/md-38/README.md
| Name | Description | Gas Destination | Reward Form | Challenges |
|-------------------|---------------------------------------|-----------------------|----------------------|-------------------------------------|
| **Decoupled** | • Gas spent on the L2 deposited to pools on the L2. <br> • Rewards on the L1 are issued in a LP token which is demurrage. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | FFS LP Token; voucher periods can be assigned. | • LP Token's demurrage assigns a lifetime to the viability of the settlement protocol which will require a new or asymptotic token voucher or token generation event at some point. |
| **Trickle-back** | • Gas spent on the L2 recirculates to pools on the L2. <br> • Rewards are provided on the L2 for bridging back to the L1 at the address of the FFS LP Token. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | Staking Token | • Rewards for pool providers to bridge back to the L1 at the address of the FFS LP Token need to be sufficient. <br> • Pool providers likely need to have only custodial access to token, otherwise intended rewarding game theory would likely be intractable. |
Copy link
Copy Markdown
Contributor

@apenzk apenzk Nov 5, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
| **Trickle-back** | • Gas spent on the L2 recirculates to pools on the L2. <br> • Rewards are provided on the L2 for bridging back to the L1 at the address of the FFS LP Token. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | Staking Token | • Rewards for pool providers to bridge back to the L1 at the address of the FFS LP Token need to be sufficient. <br> • Pool providers likely need to have only custodial access to token, otherwise intended rewarding game theory would likely be intractable. |
| **Trickle-back** | • Gas spent on the L2 is collected in pools on the L2. <br> • Rewards are provided on the L2 for bridging the collected pool tokens back to the L1 at the address of the `$RewardToken`. <br> • Ideally, intermediary tokens are used in the bridge to shield gas and staking token from bridge fallibility. | Pool on the L2 | Staking Token | • Rewards for pool providers to bridge back to the L1 at the address of the FFS LP Token need to be sufficient. <br> • Pool providers likely need to have only custodial access to token, otherwise intended rewarding game theory would likely be intractable. |

@apenzk apenzk changed the title [Review] MD-38: Provide for Atomic Bridge and FFS Usage with Fixed Token Supply [Review] MD-38: Provide for Native Bridge and FFS Usage with Fixed Token Supply Nov 22, 2024
@apenzk apenzk added the bridge label Nov 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants