MicroProofs
@MicroProofs
Followers
2,320
Following
243
Media
35
Statuses
897
$Microproofs; Posting ideas and information about blockchain centered proofs in micro form. Aiken Core Maintainer: @aiken_eng
Blockchain
Joined October 2020
Don't wanna be here?
Send us removal request.
Explore trending content on Musk Viewer
Colorado
• 122080 Tweets
Notre Dame
• 108861 Tweets
Garcia
• 59851 Tweets
Kentucky
• 57243 Tweets
#precure
• 52679 Tweets
#仮面ライダーガヴ
• 46175 Tweets
The Weeknd
• 39975 Tweets
プリキュア
• 38565 Tweets
Anita
• 35227 Tweets
Northern Illinois
• 34752 Tweets
Iowa
• 34120 Tweets
#AEWAllOut
• 31594 Tweets
Nebraska
• 29323 Tweets
Abel
• 24136 Tweets
Carti
• 24078 Tweets
Auburn
• 23005 Tweets
#ブンブンジャー
• 21156 Tweets
#UFCVegas97
• 16195 Tweets
Talleres
• 11455 Tweets
ひろプリ
• 10529 Tweets
Pinned Tweet
FortunaV2 was just launched 🥳.
I am going to do a little thread on it in the coming days. For now if you want to start getting mining check the link below.
Happy fishing
5
8
52
Cardano Scaling without a Data Availability Layer 🤔:
1) First off what is the data availability layer and why is it even useful for scaling?
Data availability is often combined with L2 scaling solutions like Optimistic and Zk Rollups.
Meaning what?
15
73
281
I’ve been seeing some confusion on what we can do between Bitcoin and Cardano. So here’s a thread to clarify/
2
58
238
Hey Cardano community. I have a super nice poll for everyone to vote on!
Currently in Cardano if you send to a script with no datum (a piece of data about the sender) attached (whether that script was made with Aiken, Plu-ts, PlutusTx, Opshin, Helios, Scalus, etc.) it is locked
Delay to add Maybe Datum
545
Don't delay
419
67
116
156
Wallet Draining on Cardano vs Ethereum in 3 Parts
We are going to get into the gritty details of what they are and how they happen.
🧵
9
44
135
Gonna do a Cardano vs Ethereum thread on wallet drain attacks and why they are different and virtually nonexistent on Cardano vs Ethereum. We will also cover Defi and how to make wallets that prevent user data for listed assets on Defi from being maliciously changed.
11
23
141
We are entering a new era of testing on Aiken.
You may have looked at other blockchain testing frameworks and wondered "What If?"
Now Cardano will have some of the most robust and easy to use on chain tools.
I'm excited to see what ends up being built this year!
What happens when formal methods and developer experience join forces?
➡️ Enters Aiken's property-based testing framework.
You may not realize it yet, but your smart-contract testing just made a major leap forward.
What is this about? 👇
24
117
533
2
28
129
Cardano Addresses part 1:
First let’s go over the forms of Cardano addresses. First is the most common form you see in the wild Bech32. ‘The Bech32 form’ or addr1trgfg…, has some error catching for typos and indicates the network type of address to the user more easily.
4
39
121
We are always making constant improvements to the Aiken compiler. Here's another small bump in reducing the script execution budget
7
10
97
If you are a team working on ZK-VM tech in Cardano (whether that is EVM, Plutus VM, zkMove, etc.) comment on this post and I’ll have you added to a chat to help make your life easier. Includes resources and Provers, etc.
Please also retweet for visibility.
14
36
90
We are always continuing to improve the dev experience when using Aiken. Here is what is coming in the next version.
Expects will print the line of code which failed. This will make debugging expects much simpler and user friendly. 😎
4
13
88
Zk-SNARKs and other curve operations, now with the dev experience of Aiken.
Note: Aiken contracts built with these new builtins and types are usable on Sancho net.
3
21
82
Let me know if you like long form threads on a particular topic. This is similar to the address threads I did on Cardano in the past.
Cardano Scaling without a Data Availability Layer 🤔:
1) First off what is the data availability layer and why is it even useful for scaling?
Data availability is often combined with L2 scaling solutions like Optimistic and Zk Rollups.
Meaning what?
15
73
281
12
5
84
This will be my next dapp project after Fortuna. And I hope to make Bitcoin block information easily accessible to anyone on Cardano.
1
4
72
First off the main thing I’ve seen is using the BTC wallet on Cardano. Note this is not the transfer of BTC or Ordinals to Cardano or vice versa. This is mainly you can reuse your seed phrase/private key from BTC on Cardano via a Plutus wallet that checks for secp256k1 or schnorr
3
2
71
Cardano Addresses Part 2: Plutus
In part 1, we explored the forms an address can take when used by Cardano nodes, but Plutus smart contracts see a different structure for addresses. Let’s go over what the smart contract sees when given an address.
3
12
69
Happy to start working at
@jpgstoreNFT
with
@scheredev
@blakelockbrown
and everyone else on this awesome team.
7
3
66
How would you do so in a single utxo?
With a library I made recently available. Now the root plus a merkle proof is all that’s needed to verify a block exists in bitcoin.
2
2
68
Ever wanted to make a sparse merkle tree with log(n) insertion, deletion, member lookup, and non-member lookup?
Yeah me neither, but I ended up doing it anyway. So I made a little Aiken example. I plan to add offchain and make it a lib anyone can import. Now you can store
11
11
65
@ch1bo_
All accounts are kept on the L1, so your funds don't actually live on a L2 (like inside a single utxo on the L1), but rather you get a utxo per account. Then each zk-proof posted will modify each involved account utxo.
This way there is no leaf state. Since the utxo pertaining
2
4
62
To give an update.
The poll is pretty close, I spoke with CIP editors about this and came to 2 options
Maybe we can still squeeze this in PlutusV3 before the HF in August-September.
If not probably will be scrapped in favor of CIP-112 with the HF coming in Jan? maybe. This will
Hey Cardano community. I have a super nice poll for everyone to vote on!
Currently in Cardano if you send to a script with no datum (a piece of data about the sender) attached (whether that script was made with Aiken, Plu-ts, PlutusTx, Opshin, Helios, Scalus, etc.) it is locked
67
116
156
4
4
62
Hope you enjoyed the thread. Let me know if you have any questions.
4
1
63
BLS was merged. Now to make a branch of the stdlib with the new Script Context type
3
7
58
Part 2: Wallet Draining
Part 1 here:
So now that we understand how assets exist on a blockchain, we can get into the harrowing attacks called wallet draining.
Wallet Draining on Cardano vs Ethereum in 3 Parts
We are going to get into the gritty details of what they are and how they happen.
🧵
9
44
135
3
26
60
With this block information you could prove any transaction that happened on Bitcoin and thus prove any input or output (with some limitations due to transaction size). Though zk proofs could help breakthrough any limitations due to size.
1
2
58
This could allow for a uniform wallet experience that controls both ADA and BTC across 2 chains. But the assets don’t mix, you can’t sell Bitcoin on Cardano and vice-versa.
2
3
58
Fine you people can’t even be satisfied with a simple admin/DAO solution for allowing assets to be recovered in the case of wrong or no datum, but keeping everything else decentralized. 🫠 Jk lol
So to alleviate the burning “must be decentralized at all costs” burden from your
@adamKDean
@ItsDave_ADA
I think of it like there would be a admin that can withdraw value sent to the smart contract with no datum or mismatching typed datum. From there the admin may choose to send it back to the sender (honest) or keep it (dishonest) but ultimately the power would be in the hands of
2
0
4
11
11
56
As a side note you can use multisig between Bitcoin and Cardano to have smart contract interactions via state channel L2s like Lightning or Hydra. It sounds impressive, but remember you do need to open a channel with the person/people you will be trading with.
2
2
56
The more I think about, the more I think L2's that are DeFi driven are a mistake!
Now before you riot at me, let me go over the current and future issues and propose an alternative way of speeding up DeFi specifically.
Then take your best shot at me 😏
5
15
55
Now what could you do? The main 2 applications are creating trustless one way bridges or trust minimized bitcoin vaults that allow you to represent the BTC value on Cardano provided the representer has some collateral.
You could also prove an Inscription exists on Bitcoin and
2
2
54
Now the next thing you can do is verifiably store all Bitcoin blocks up to the latest one in a single utxo. You could even verifiably add on future blocks. Proof of Work is very easy to verify so doing on chain verification is not difficult.
1
2
51
Cardano Addresses Part 3: CBOR Serialization
1/ If you are a dev you’ve probably seen this format called JSON.
2
5
48
We crossed the epoch boundary at block number 2016! The difficulty number has gotten 4 times harder. The difficulty target fell from 65535 to 16383. Congrats we have our first difficulty change 🎉
7
2
46
What about 2 way bridges?
Well Bitcoin is quite limited. So we lack the ability to verify any kind of information about the Cardano ledger.
So currently we are limited to multisig and federated bridges.
2
2
47
There are 2 parts to an Optimistic rollup.
The state proof (merkle roots typically) is posted to a L1 followed by a challenge period. To prevent fraudulent state proofs, the challenger uses a proof of the state from the DA layer to challenge the posted state proof if needed.
1
1
41
5) Another in progress solution?
The next in progress solution is a long lived Hydra channel with incremental and decremental commits.
The advantage here is not every state transition is posted to the L1, instead checkpoint state transitions are posted at regular intervals.
1
1
43
@cardano_whale
If there's any technical details about Cardano you want to make threads about, I'd be happy to coordinate with you. Lately I've been doing Cardano threads on how addresses work. It gets pretty technical further in.
1
1
41
Hope you enjoyed my long thread. I woke up and made this on a whim. This is only a light gloss over on the topic, so I'm happy to go in more details in comments or discord.
Note: I use tx and transaction interchangeably.
3
1
41
Forecast says that next epoch (Starting block number 4032) will be 4 times harder. We are at block 3425. Get ready for the difficulty spike. You all are too crazy 😂😂
$TUNA
11
3
40
First off the only parts that get posted to the L1 is the state transition and the small Zk-proof itself (No DA Layer needed). You have absolute confidence that the state transition is proved to follow the L2 ledger rules (provided a correct Zk-proof implementation).
3
1
41
To make building easier MLabs needs one last bout of funding to get these primitives finished. They are nearly done. Shout out IOG and Charles and let’s get this finished.
5
12
41
In Zk-rollups the posted proof proves the execution and state transitions performed on the L2. No challenge period necessary. So why the need for data availability?
The Data availability is necessary to tell you what the new state is after being transitioned via the proof.
1
1
39
2. You can not access reference inputs that exist outside of Leviathan. Only utxos inside the Leviathan system can be referenced.
If a ref input is in a Leviathan tx and then spent before the Leviathan tx is on-chain then that tx will fail and the Leviathan sequence is broken.
1
2
39
I have many more contracts to make 😃. I enjoy writing the Aiken compiler as much as I like writing in Aiken.
One of the reasons we think Aiken is incredible is because we also use it. We built it for us initially and we firmly believe that using your own software is paramount to its success and quality.
And the beauty of Open Source is that it can be your software too.
9
31
224
1
6
38
If like my posts or have been watching our progress on Aiken, please consider voting in Catalyst for Aiken. All funding goes toward making Aiken even more awesome 😎.
3
8
39
It is also technically possible for the Sequencer to combine multiple user txs into one published tx if all dApps used in each tx are composable and support that feature.
Then the Sequencer posts the series of individual/batched txs to the L1 and finally prepares the next series
1
1
38
The checkpoint state transitions would include signatures by users to authorize moving and receiving assets and even allow changing datums with some extra complexity.
The drawback is still the same as point 2 above. Referencing other Cardano utxos is unavailable in Hydra.
1
1
38
There are two main drawbacks to this approach.
1. The L1 block space needed to validate all the Leviathan transactions is basically equal to the transaction size of each transaction confirmed by the Sequencer
1
1
37
6) A solution with a different drawback. Zk-proof L2
I'll begin with the drawback. Zk-proofs are still "new" in the cryptography world. No implementation today is really battle tested. So tread carefully!
Now onto the positives.
1
1
37
Since each tx is fully validated and the state transition is posted on-chain there is no need to make any data availability proofs. Smart contract validation is of course also possible since the Cardano L1 supports it.
4) What are some drawbacks?
1
1
37
A Zk-rollup proof could include every tx from the L2 so far or it could only include a single tx from the L2. Both are valid transitions from the Zk-proof side. So you need the data availability to tell you what transactions were actually included in the Zk-proof.
1
2
35
We have some good dev ex features coming in the next Aiken version.
1. When running a multi-validator built with traces on, you get a little message telling you which validator function between the two just ran.
1
5
33
Add a comment to the CIP if you actually care about reducing wasted block size. Increasing block size won't reduce v1 script size waste lol.
@hoskytoken
@MicahAlexKenda1
@SmaugPool
Here is the CIP.
If this gets rejected then PlutusV1 scripts will continue to populate blocks forever 😂
1
9
25
3
7
34
So, what's the other option.
To spell it out simply, you post each state transition to the L1. Note the state transition doesn't just have to be for a single transaction. I will show you scaling solutions where a single state transition wraps up 100s of user transactions.
1
1
33
2) So then is it possible to scale without data availability? And why consider that?
The reason data availability is so critical for Optimistic and Zk-rollups is that the state transition of all L2 accounts is not kept on the L1. Only a compressed proof of the state is on the L1
1
2
33
Now why consider that?
Current data availability approaches rely on new cryptography (KZG proofs) and/or other Blockchains like Celestia, Ethereum, etc. Rather than trying to be on the bleeding edge right now with potential financial risks. We can explore alternative solutions.
1
1
32
Each "Ref" transaction would carry with it a slot interval so you know your L2 transaction referenced a valid utxo from the L1 even though your L2 tx is not yet finalized.
This allows for a unique solution with no DA layer needed, completely trustless validation, and L1 utxo
3
1
33
@cNFTfART
To make building easier we need funding to get these primitives finished. Shout out IOG to finish funding this work
9
16
30
@SebastienGllmt
@Padierfind
@PaimaStudios
@TarochiGame
@cardano_whale
@IOHK_Charles
@RichardMcCrackn
@bigpeyYT
@aiken_eng
@FarmerNash_
@scheredev
@nmkr_io
Yes. In fact I’ll add a little addendum. But I think with a with a modification to CIP-68 we can have a much better standard with only one extra NFT for metadata lookup. I’ll write a thread on this later. This way it wouldn’t require 2 NFTs per mint of the asset. 🎉
6
3
32
Imagine a tx that has over 100 ref inputs and just a single output and change output. The tx size would be small actually.
This allow you to make a series of chained transactions that reference any utxos on Cardano while at the same time you use those references in your L2 txs.
1
1
31
Use cases include
Smart wallets, wallets that can do 2fa, vault features
(prevent wallet drainers), and intention based transactions (single transactions swaps with dexes and free limit order placements).
Datumless utxos accidentally sent to a Dapp could be recovered for the
2
5
30
Now here's where things get interesting. You can include special state transactions that are produced by referencing various utxos in the L1 chain and use that in the Zk-proof as well. Suddenly your Zk-proof L2 gets access to any L1 utxo state!
2
2
30
@monad_alexander
Here is Aiken. What is Aiken? Well it’s a language and set of tools for interacting and creating smart contracts in an easy way. The goal also is to create a reverse engineering tool to reverse all these onchain contracts 😈
0
4
28
Keep the conversation here
1
8
27
Building Aiken has been one of the funnest projects I’ve tackled. There’s more cool stuff to come past this milestone 🎊
📣Exciting Announcement - Aiken's alpha phase has launched!📣
#Aiken
is an open source
#SmartContract
language & toolchain, specifically created to simplify & enhance the development of smart contracts on
#Cardano
.
Learn more below ⬇️⬇️⬇️
@aiken_eng
@rvcas
@_KtorZ_
@MicroProofs
26
287
1K
3
4
27
Part 1: Assets on a Blockchain
Before we even get into wallet drains, you must know how assets transfer on a blockchain.
In Cardano, assets and ada exist in the value field of a UTxO at an address. That address's payment credential then constrains if the asset can move.
3
2
24
In the next part I will go over wallet draining attacks.
And in the final part I will go over wallet signing attacks that affect your assets on Defi smart contracts.
4
1
25
@hoskytoken
@MicahAlexKenda1
@SmaugPool
Here is the CIP.
If this gets rejected then PlutusV1 scripts will continue to populate blocks forever 😂
1
9
25
The Payment Credential can either be a script that validates the tx or a pub key hash. To use the asset in a transaction (regardless if the tx sends or burns the asset), you must satisfy the payment credential's conditions.
1
0
23
On Ethereum this relies on following the token standards. If the standards are followed we can detect the asset transfers, if an asset smart contract deviates from the standard then the movement of an asset can be hidden from the owner.
5
0
22
If you have use cases that require bitwise operations on Cardano. Be sure to comment here posting your use case!
4
6
23
In Ethereum, ETH exists at an address as an account balance. But each assets exists at the smart contract address as a mapping of account owner to number of that asset. To transfer an asset, you first acquire the right permissions, then call the transfer method.
3
1
23
So how do you detect the asset is moving?
On Cardano any asset in a tx is technically moving. We filter out assets that are going back to the same address and show the balance difference for assets that are going to a new address.
3
0
22
@cardano_whale
The issue I have with Solana is while the VM is different and it has its own implementation of functions similar to what’s in EVM, the smart contract standards came from Ethereum. And the Ethereum standards for smart contracts are atrocious.
2
0
22
@ch1bo_
Note there is not nearly as much storage/bloat saved in comparison to using a Data availability. Which compresses on-chain account information for minimal storage.
Instead the savings come in if I make 30 transactions with my account before the next zk proof is posted then those
3
0
22
@LusoAda
@ch1bo_
Think bigger. Imagine a “transient” layer basically a dapp smart contract that can do anything with cheaper fees. And occasionally your L1 account utxo is updated to match your current balance. Anytime you can initiate a withdrawal and you have an easy back door since your state
2
2
22
@flubdubster
@SLICENSPICE
@HeptaCardano
@DeFroppy
@JaromirTesar
A fix was already merged for the Chang hard fork. Now referencing a script costs bytes per a new param. So in the future this would likely cost more like 10-30ada
1
6
22
We crossed the second epoch and have moved to the third. Hashes are getting harder and more hash power is being thrown around. Looks like the next epoch will be another 4x difficulty increase.
4
0
21
If you are the account owner, you can simply call transfer to move your assets. For a Defi smart contract to transfer your asset, it first gets permission via the approve or permit methods. Then the Defi app can call the transfer method from the asset smart contract.
4
0
20
@MicheleHarmonic
It’s a bit more nuanced. Your script arguments still come in as data. So you either need to work with your arguments as Data like in PlutusV2 or spend the budget to convert arguments to SOP and then use them which might be higher or lower cost depending on how much you do after
2
1
20
The asset smart contract will then change the amounts stored in that mapping based on the transfer call. The asset contract implements its own permission and transfer methods. Usually those methods follow some ERC standard, but ultimately the contract creator decides.
3
0
20
So users wont even make transaction anymore?
No, there are still cases where users will submit transactions. But for DeFi where high speeds, time ordered sequencing, and transaction compression is valuable then intentions plus multiple competing sequencers is my answer.
Could
8
2
20
@OptimFi
Why do you need a permission model when you already have an intent model. Simply using your private key or other verification to sign a message of intent is more than enough to prove which dapps you want to execute in a given transaction. I’m not sure why there is a permission
3
2
20
The address works by the following, the first part is a word that identifies the type of address. Then it is followed by a separator “1”. Which is then followed by a BCH encoding of the blake2b-224 hash of our public key. More on BCH encoding in a different tweet.
1
0
19
The multisig tutorial video is on the way. But for now enjoy some in depth docs on Aiken. I updated the repo with some docs for flat encoding and decoding.
0
0
19
Finally if you liked this thread then please retweet and share.
Here is an earlier thread if you like this content.
I’d also like to add that even time dependent smart contract transactions are predictably deterministic. I’ll show you how in this thread.
1
3
13
1
2
18
@DegenTravis
@wabdoteth
Any contract that switches over to using PlutusV2 can at any point remove the collateral requirements. To maintain backwards compatibility PlutusV1 was kept as is and will not have new features added to maintain consistency. But as projects go to V2 collateral will disappear.
2
0
18
@RichardMcCrackn
@the_ape_society
@jpgstoreNFT
@aiken_eng
Thanks so much for supporting Aiken. Everything helps and we have a lot of cool stuff coming in February
1
0
17
1
0
17
@jonahkoch
@ElRaulito_cnft
I’m making a contract I call “Bullet” (just a fun name) that allows for any kind of intention even enforcing another script is run. And the key interoperability feature is the contract can support 20+ intentions in a single tx. And the intentions don’t need to be from the same
3
2
17
@UnpopularEL
Yeah just need a smart token standard CIP with clawbacks and freezing. (A few are in progress) Make the risks transparent to users and let people decide what they like.
4
3
16
@amw7
@0xMetamatt
I’d recommend looking into moving forward with CIP-69[]
The main things left are pushing this as a community wanted feature and fleshing out the specs. This CIP solves 2 problems in one go. Allowing future spending scripts to be called without a datum and
1
4
16
I’ve been heads down working on finishing a few more code gen improvements before alpha. But I’m also really excited to have some time soon to build some different smart contracts in
@aiken_eng
. These will all be open source. In other words, more Aiken examples soon ;)
3
2
16
@Quantumplation
I’d say probably 2-3 months max. Possibly less. Talking with Lehin on github to see what can be done
1
1
15
First we give users smart contract wallets. This enhances security by standardizing more secure multisig setups than what a native script can do. And it allows for vaults within the wallet that can help prevent liquidity drainers.
The wallet contract will also support DeFi
3
0
14