"Any computable function can be verified on Bitcoin"

WOW

https://bitvm.org/bitvm.pdf

Reply to this note

Please Login to reply.

Discussion

In plebspeak?

Cool

I don’t need to play chess on chain. I need my money to be secured.

> I don’t need to play chess on chain

Then don't

> I need my money to be secured

No worries, bitcoin remains exactly as it was before

Any summaries for the 80IQ crowd?

BitVM lets us take powerful programs created outside of bitcoin and, inside a bitcoin transaction, check that someone executed the code properly, or penalize them if they did not. The code can be anything. You can send someone sats only if they prove they won a game of chess. You can send someone sats only if they prove they gave your a corresponding amount on a sidechain. You can do covenants with it, sidechains, gambling, and fancy defi-like stuff. All without a soft fork.

I don’t see how that could be possible πŸ€”

We wrote a fraud proof system in bitcoin script using only the boolean logic gates, hashlocks, and timelocked. Then we wrote a function that does two things: first, it processes any boolean circuit (i.e. anything that a microchip can process), and second, it converts it so that our fraud proof system can falsify it if it runs incorrectly. Then we wrote a third function: it finds each logic gate in our falsifiable circuit and separates the whole thinf into individual tapleaves in a massive taproot tree, where the connections between circuits are preserved through hashlocks. Finally we made it so that each circuit *also* has a javascript equivalent.

With all of this in place, the prover can run the program in it's javascript circuit form, take the outputs, and send them to the verifier, along with the data he passed into the program. The verifier can then rerun the program, and if any logic gate gives an output different from the one the prover committee to, the verifier can demonstrate the error in the corresponding tapleaf, and take the prover's money.

interesting

So, funds for a pegged sidechain could be held in a "wallet", like with Drivechain escrows. When the sidechain spend conditions are met, the secret is revealed to the winning side or rightful owner based on the sidechain script in the Bvm.

But why would you want to? Seems inefficient to me... Isn't this the main criticism of EVM ? Blockchains are not efficient databases.

nostr:nevent1qqs8kjyxurflfjyvrrplass4qwutq342ug4smgjm65wxftd8e34amvgprdmhxue69uhhyetvv9ujumn0wd68yurvv438xtnrdakj7q3qlnms53w04qt742qnhxag5d6awy7nz6055flnmjkr6jg39hm86dlqxpqqqqqqzyddkg0