Proposer Builder Separation Problem in Ethereum

RasoulRamezanian1 95 views 45 slides May 27, 2024
Slide 1
Slide 1 of 45
Slide 1
1
Slide 2
2
Slide 3
3
Slide 4
4
Slide 5
5
Slide 6
6
Slide 7
7
Slide 8
8
Slide 9
9
Slide 10
10
Slide 11
11
Slide 12
12
Slide 13
13
Slide 14
14
Slide 15
15
Slide 16
16
Slide 17
17
Slide 18
18
Slide 19
19
Slide 20
20
Slide 21
21
Slide 22
22
Slide 23
23
Slide 24
24
Slide 25
25
Slide 26
26
Slide 27
27
Slide 28
28
Slide 29
29
Slide 30
30
Slide 31
31
Slide 32
32
Slide 33
33
Slide 34
34
Slide 35
35
Slide 36
36
Slide 37
37
Slide 38
38
Slide 39
39
Slide 40
40
Slide 41
41
Slide 42
42
Slide 43
43
Slide 44
44
Slide 45
45

About This Presentation

Proposer-Builder Separation Problem


Slide Content

University of Lausanne
Proposer-Builder
SeparationProblem
Rasoul Ramezanian
May 27, 2024

1What is and Why PBS?2Discussing three Mechanisms for PBS
2.1 MEV-Boost Mechanism
2.2 Single Slot Mechanism
2.3 Two-Slot Mechanism
3Comparing Mechanisms4Designing a New Mechanism, An Initial Approach5Axioms for PBS6Further Improvement for PBS
Contents
2/45 Rasoul Ramezanian

WhatisandWhyPBS?

Constructing a block before DeFi emergence
Before, forming a protableblock was an easy task.
What is and Why PBS?
4/45 Rasoul Ramezanian

The emergence of DeFi led to the discovery of MEV opportunities.
MEV Opportunity
MEV Opportunity is the act of
bundle of orders of transactions.
Three main MEV opportunity resources are:
1Arbitragebetween DEX and CEX2Sandwich attackto traders of DEXs3Liquidationof Lending/Borrowing Platforms
MEV Opportunity Searchers
Searchersare agents who
searchfor MEV opportunities,
formbundles of transactions, and
payfees to miners/validators to include their bundles in a block
MEV Opportunity
5/45 Rasoul Ramezanian

Constructing a block after DeFi emergence
After the emergence of DeFi, forming a high-value block becomes a
complicated
What is and Why PBS?
6/45 Rasoul Ramezanian

Outsourcing
So Validators decided to outsource the block forming activity byselling
theirrightstobuildblocks.
What is and Why PBS?
7/45 Rasoul Ramezanian

Proposer-Builder Separation
The role of a validator is separated into two parts:
block proposer BlockBuildingRight(BBR) and just
propose the block)
block builder BBRs and builds blocks)
PBS mechanisms consist of two sub-mechanisms:
1price discovery2Swapping
What is PBS?
8/45 Rasoul Ramezanian

In the next section, we discuss three mechanisms for PBS, where
-all of them are the same in, and
-they dier in
Four possible outcomes of swapping:
Three Mechanisms for PBS
9/45 Rasoul Ramezanian

MechanismsforPBS

Three well-known mechanisms for PBS are
1MEV-Boost Mechanism (an out of protocol design)2Single-Slot Mechanism (an in-protocol design)3Two-Slot Mechanism (an in-protocol design)
Three Mechanisms for PBS
11/45 Rasoul Ramezanian

MEV-BoostMechanism

MEV-Boost mechanism, proposed by Flashbot, is a swapping mechanism via
a broker/trusted third party.
MEV-Boost Mechanism
13/45 Rasoul Ramezanian

MEV-Boost Mechanism
14/45 Rasoul Ramezanian

1Block builders(using bundles received from searchers, along with their
private order ow, and transactions from the public mempool) construct
the most protable blocks and send it to a (some) rely(s).
2Relaysare responsible for 1-validating the content of the blocks,
2-
3-
4-
3Proposersinstall the MEV-Boost client and connect to relays to receive
bids form.
MEV-Boost Mechanism
15/45 Rasoul Ramezanian

Trusts in Relay
Trust to not reveal:The block builder needs to trust the relay not to
reveal the contents of the block.
Trust in validation and bid inclusion:The proposer has to trust the
relay to verify that the block is valid, and includes the transaction of
sending bid to proposer's address.
Trust in Broadcasting:The proposer and the builder need to trust the
relay to assemble the full block and broadcast it.
Trust in identifying the head:The proposer has to trust the builder to
correctly identify the head of the blockchain and avoid creating a fork,
thus preventing the waste of the slot.
MEV-Boost Mechanism
16/45 Rasoul Ramezanian

If the builder fails to correctly identify the head of the longest chain, the
result is that no swapping occurs, both the slot and the contents of the block
are wasted.
Wrong Fork
17/45 Rasoul Ramezanian

Howtoeliminate
thepresenceofthe
relay?
Solution1: Replacing
Relaywithanattester
committee

SingleSlotMechanism

Replacing Relay with an attester committee
Source: ethresear.ch
Single Slot Mechanism
20/45 Rasoul Ramezanian

Replacing Relay with an attester committee.
1Every buildererasure-codeshis payload inton=256 chunks where
n3=85 cuuncks is needed to recover the whole of the contents. Then
he sends thei'th chunk to thei'th attestersecretly.
2Each attester checks the received chunk for.3If the chunk is valid, the attester will vote
payload and broadcast it to the Auction subnet.
4The proposer accepts the
leastt=2n3=170 votes/signatures.
5After the proposer sends their acceptance, the committeereveal the
chunks, and the network reconstructs missing chunks if needed
6Attesters of the network vote on the assembled block revealed by the
committee.
Single Slot Mechanism
21/45 Rasoul Ramezanian

Possible malicious behaviors
What if the proposer signs more than one header and cause that attester
committee reveals more than one payload.
Single Slot Mechanism
22/45 Rasoul Ramezanian

Howtoeliminate
thepresenceofthe
relay?
Solution2: Doing
swappingintwoslots

Two-SlotMechanism

The Two-Slot PBS occurs over two slots. In the rst slot, the swapping
between BBR and the bid occurs, and in the second slot, the block
constructed by the block builder is appended to the blockchain.
Source: ethresear.ch
Two-Slot Mechanism
25/45 Rasoul Ramezanian

First Slot:Swapping BBR with the wining Bid
1Every block builder publishes a
header=(hash of their payload,,)
2The header with the highest bid is declared the winner and proposer
include it in the beacon block of the rst slot.
3One committee (ofNcommittees) attests to the beacon block
Second Slot:Appending the constructed block to the blockchain
1The winning builder publishes an intermediate block, consisting of the
payload and as many attestations on the beacon block (the block published
in the rst slot) as they can nd.
2the remainingN1 committees attest to the intermediate block.
Two-Slot Mechanism
26/45 Rasoul Ramezanian

Comparing
Mechanisms

1MEV-Boost is an
Two-Slot are
2MEV-Boost relies on the relay as a, whereas we do
not have any trusted third party in Single-Slot and Two-Slot
mechanisms.
3MEV-Boost and Single-Slot occur within one slot, while the Two-Slot
mechanism
4MEV-Boost and Single-Slot are, whereas Two-Slot is
pre-payment.
5Single-Slot requires more
MEV-Boost.
Comparing Mechanisms
28/45 Rasoul Ramezanian

MEV-Boost is considered
builder can transfer the bid to the proposer's address
values to their own address.
So, it is possible that a block builder does
address to pay the bid immediately. They may consider an order in which the
payment to the proposer occurs at the end of the block, after they have
already received fees from searchers and users, thus accumulating enough
resources to cover the bid.
Post- Payment
29/45 Rasoul Ramezanian

Howtoeliminate
thepresenceofthe
relay?
Solution3: Sellingslots
andReplacingRelay
withaSmartContract

DesigningaNew
Mechanism,
AnInitialApproach

We construct a smart contract to execute our PBS mechanism.Auction-Future-Slot
1Every proposerjdepositsan amount ofcj=cupfront in to smart
contract to be eligible to sell their slots in this market.
2Every Proposerjwho wants to sell theirfuture slotsjsubmits it to the
smart contract.
3Every Builderisubmits their bids for available slots. For example,
bidi¹sjºis the bid of builderiforslotsjof proposerj.
4Every proposer
An Initial Approach
32/45 Rasoul Ramezanian

4Every builderiwhose bid has been accepted by a proposerjdeposits
bidi¹sjºinto the smart contract.
5During slotsj, builderisends his j.6After the timeout of slotsj, if proposerjhas proposed the
payload ias a block, then the smart contract sends
¹bidi¹sjº ¸vºto proposerj.
7If not, the smart contract returns¹bidi¹sjº dºto builderiand c.
An Initial Approach
33/45 Rasoul Ramezanian

Auction-Future-Slot Mechanism
34/45 Rasoul Ramezanian

Let's refer to the value of the block constructed by builderiasvi.
Theorem
If viŸbidi¹sjº ¸c then the proposer has no incentive to deviate from the
rules of the mechanism (He would not steal the payload).
Auction-Future-Slot Mechanism
35/45 Rasoul Ramezanian

AxiomsforPBS

We need to
that whether they satisfy following axioms.
Axioms
A1.MEV Domination
A2.Incentive Compatibility
A3.Censorship Proofness
A4.Decentralised Domination
A5.Pareto Eciency
Axioms for PBS
37/45 Rasoul Ramezanian

Definition
We say a mechanism`dominates in value extraction q
whenever the sum of the revenue of proposers in`exceeds that of proposers
inq. In other words, more MEV is extracted in`.
Theorem
MEV-boost mechanism
mechanism.
Proof.
Sketch of Proof:Themain ideaof the proof is that, since Two-Slot, in contrast to
MEV-Boost, requires pre-payment, there could be some sophisticated builders who do not have
enough funds in their address for pre-paying bids in the Two-Slot mechanism. However, they
can still work in MEV-Boost, which leads to the conclusion that the sum of the revenue of
proposers in MEV-Boost exceeds that of proposers in the Two-Slot mechanism.
MEV Domination
38/45 Rasoul Ramezanian

Incentive Compatibility
A mechanism isincentive-compatiblewhen no participant has an incentive
to
Prove or Disprove
We need to formally study incentive-compatibility of MEV-Boost,
Single-Slot and Two-Slot mechanisms.
Incentive Compatibility
39/45 Rasoul Ramezanian

Incentives of Agents
There are six dierent types of agents who participate in PBS mechanisms,
and we need to formally model their
incentives in each mechanism.
Agents:
Users Searchers Builders
Relays Attesters Proposers
Example
MEV-Boost: What are the incentives of relays to behave honestly?
What if the relay colludes with the validator of the next slot and doesn't
show (censor) the best bid to the current proposer?
Incentive Compatibility
40/45 Rasoul Ramezanian

Question:
We need to formally study and answer following questions:
1Which one is more censorship-resistant:
"POS or POS with PBS"?
2In PBS mechanisms, does empowering proposers with an
lead to more censorship resistance?
Censorship Proofness
41/45 Rasoul Ramezanian

Let`be a PBS mechanism. ByB`, we refer to the set of individuals who
can be eligible to participate as builders in`.
Decentralized Domination
Given two mechanism`andq, we say`decentralized dominatesq
wheneverBqB`.
Question
Which one is more decentralized MEV-Boost, Single-Slot, Two-Slot?
Decentralized Domination
42/45 Rasoul Ramezanian

FurtherImprovement
forPBS

Inclusion List
Decentralization of Builder
Trust between Builder and searcher
Selling only a part of a block, not the whole space of the block.
Selling the right to a slot, rather than a specic block to be published at
that slot.
Further Improvement for PBS
44/45 Rasoul Ramezanian

Questions?
Mechanism design involves creating mechanisms for specic purposes and then
formally verifying their properties.
Thank you!
45/45 Rasoul Ramezanian