News for hackers. Stuff that matters.
Re:BitVM: Compute Anything on Bitcoin [pdf] by lxgr on Tuesday October 17, 2023 @09:40AM (#37914886)
How does this work game-theoretically? Couldn’t a Verifier assume that most Provers are honest and just skip doing the computation themselves?
Re:BitVM: Compute Anything on Bitcoin [pdf] by tromp on Tuesday October 17, 2023 @10:01AM (#37915186)
The verifier would normally have a financial stake in the correctness of the computation. For example, 2 parties could use this model to play a game on-chain for some amount of bitcoin. Then for every move, the party making the move commits to some move and new game state (acting as Prover) while the other party checks that the new state is correct (acting as Verifier). So the roles of Prover and Verifier are swapped at every move.