Itâs the age-old debate between Proof of Work and Proof of Stake, brought back to the forefront of peopleâs minds by Ethereum's successful merge back in September.
The critiques of both are well documented. One side will point to the fact that Bitcoin consumes energy at a significant scale. Others will highlight Ethereumâs new realities when it comes to concentration of power. Post merge, Lido plus three of the largest exchanges control over 50% of staked ETH.
Neither solves for governance, evidenced by the fact that both Bitcoin and Ethereum manage governance off-chain.
In this piece, Iâll argue that thereâs a more direct solution; one that holds advantages over Proof of Work and Proof of Stake in terms of energy use and governance controls.
Whatâs neat is that this solution is based on the already existing, informal process that underlies both Proof of Work and Proof of Stakeâand any other consensus mechanism for that matter.
Thatâs because consensus is something that humans do naturally and intuitively all the time. We can formalize that process and automate some of the more tedious parts. This is how we get to a foundational form of consensus without a lot of extra steps.
Proof of Work: How we got here
Decentralized, anonymous ledgers all face the same challenge. In designing a system that allows anyone to participate, you need a way to decide between equally valid ledgers to ensure that everyone stays in agreement. The obvious answer is some kind of voting mechanism. But as with any fair and equitable voting mechanism, you need to prevent any single person or entity from having more votes than they should.
One way to frame this is that the problem weâre trying to solve is a form of digital democracy.
Proof of Workâs approach requires participants to contribute computing power or hashing to the system. We can think of miners "voting" with their computing power by choosing one of the valid blockchains and attempting to extend it. After all, you canât fake computing power. And as the value of the system grows and competition for computing power intensifies, the cost of outvoting the rest of the system goes up along with it.
Thatâs how we achieve consensus anonymouslyâProof of Work in a nutshell.
Of course, computational power is essentially a proxy for energy consumption, and the last thing the world needs at the moment is wasted energy. We can minimize waste by using stranded or surplus energy but there is no way around the fact that any computer doing proof-of-work could always be doing useful calculations instead.
The last point Iâll make here is on governance. In the early days of Bitcoin, some protocol changes were indeed voted on and decided by miners. But that approach came to a head during the debate around block size and scalability, what Coindesk, at the time, described as a âconstitutional crisis.â In some contexts, minersâ incentives arenât aligned with the rest of the network. In the context of block size for example, miners prefer smaller blocks to force users to pay them higher fees.
Naturally, the community didnât take that lying down and turned to extra-protocol forms of governance as a response as well as hard forks. Eventually, this put enough pressure on miners such that a compromise was reached. The point is that Bitcoin isn't governed purely by proof-of-work. Important strategic decisions are made through a political process outside of the protocol and not simply by the majority of miners.
Given these limitations, there has always been interest in potential alternatives to Proof of Work.
Proof of Stake: The popular alternative
If we think about consensus mechanisms as forms of democracy, then Proof of Stake would be a plutocracy. You might call it Proof of Wealth.
Instead of computing power, votes in a Proof of Stake system are counted proportional to the number of tokens a person or entity stakes. Assuming tokens have been broadly distributed among many unaffiliated participants, decentralization is achieved without the energy needs of Proof of Work.
Just as you canât fake computing power, you also canât create tokens out of thin air. Sure, a well-capitalized organization could buy up tokens to increase their voting power but thatâs by design. As a rule, Proof of Stake is a consensus mechanism typically dominated by aggregators of tokens such as exchanges or DeFi platforms.
When those staked tokens are also tied to governance of the ledger itself, it creates a feedback loop, which tends toward inequality and power concentration. The more tokens you have, the more votes you have. If you can turn that power into greater profits, you can turn those profits back into greater power. Keep doing this and you will eventually fully control the system.
This is less of an issue if the system is still in competition with other Layer 1s. Weâre generally fine with corporations being governed by insiders such as shareholders orâin the case of co-opsâworkers, as long as consumers still have a choice. If the company makes a bad product, you can buy a different one, and if they're an awful employer you can work someplace else. If an evil dictator takes over a corporation, it will lose customers and employees, a natural form of checks and balances.
Problems start when corporations become too entrenched and consumers lose that choice, which is when we typically see unchecked bad behavior. The same applies to a consensus system. While it still competes with other systems, those checks and balances continue to exist. But if it becomes universal, then unchecked concentration of power becomes everyoneâs problem.
(Itâs one reason why Iâm so passionate about Interledger. With cross-blockchain interoperability, you get persistent competition between consensus systems, which serves as an additional layer of checks and balances. Weâll get into that more in a future post.)
Ethereum solves for this by taking governance off-chain, including, as they describe, both âsocial and technical processes.â But when power transitions from votes and well-defined rules within the system to more informal processes outside the system, it's difficult to guarantee transparency and fair representation.Â
Just like Proof of Work, Proof of Stake defers the issue of governance.
Beyond questions around governance, a more common criticism highlights the circular logic inherent in any Proof of Stake system:
In order to know how many tokens each person has, you need to know the status of the current ledger.
In order to know the status of the current ledger, you need to know how the majority of the staked tokens has voted.
Any Proof of Stake system has this problem. Anyone who has access to the keys of previous validators could create an alternative ledger history thatâs completely and equally valid. There are workarounds, such as creating regular ledger checkpoints, but this raises further questionsâe.g. what is the next checkpoint, how are checkpoints determined, etc. An already nebulous off-chain governance system now must make even more arbitrary decisions.
Consequently, Proof of Stake requires myriad features that account for flaws and potential attack vectors that are inherent in its design. (Lyn Alden has a great writeup on this subject.)
There are potential regulatory hurdles as well. Hours after the Merge, SEC chief Gary Gensler told reporters that he thought Proof of Stake tokens looked like securities due to staking rewards.
All roads lead to Rome
So where does that leave us?
Proof of Work is simple, relatively reliable, and expends a ton of energy.
Proof of Stake is complex, logically awkward, and plutocratic.
Neither solves the question of governance.
Surely, thereâs a better way.
In fact, there isâone thatâs already working in the real worldâbut first, letâs take a step back and take a look at how we choose a consensus mechanism in the first place.
Think of it this way: Most people donât consider the consensus mechanism itself when deciding who they want to be in consensus with. Maybe you heard about a cool gaming NFT project that you want to support. It happens to be on the Ethereum ledger, which is Proof of Stake.
Or maybe youâre looking for alternative assets as part of a diversified investment portfolio. You choose Bitcoin, which is Proof of Work. Or maybe you chose it because itâs the most popular and longest running.
In deciding what chain to participate in, youâve made the decision based on your particular use case, needs, or target community.
In other words, the first choice you make isnât about the consensus mechanism itself. Instead, itâs:Â Who do you want to be in consensus with?
Understanding consensus
Now that weâve established this central choice that any participant needs to make, letâs take another step back.
What is consensus, anyway?
Hereâs my definition:Â Consensus is a process of voluntary agreement.
In society, consensus establishes the ground rules for cooperation, enabling us to efficiently interact and transact with one another.
For example, Iâm able to go to the grocery store to buy food and supplies because of consensus. Thereâs consensus on things like the monetary system, the legal system, languages, and certain social norms. If we canât agree on how to make payment, how to settle disputes, or how to communicate, itâs going to be a tough time at the supermarket. Most likely, I wonât be able to buy my groceries and my grocer wonât be able to sell their products.
You and I might have different opinions on how our country should be run. We might be on the opposite sides of a political issue. But if my side loses the vote, Iâll still voluntarily agree to follow your rule so that we can collectively move forward. Despite our disagreements, we find a way to reach consensus such that progress can be made and peace maintained.
Part of it is because not coming to consensus comes with huge costs. Ideally, weâd like to avoid a revolution or civil war. Or in blockchain parlance, a fork.
The key point, again, is that consensus is voluntary. You can claim that youâre actually Napoleonâno one can stop you. But you wonât be in consensus with the rest of society, which will create friction and increase your social and economic interaction costs. Because of this, itâs rare in practice to run into someone who strays too far from the norms of social consensus. The benefits of consensus outweigh the cost of not being Napoleon for most people most of the time.
We want to agree on transactions that have occurred. We might disagree on the exact order of when those transactions came inâthis could be simply due to being located at different distances on the globe from where a transaction originated. But we seek agreement anyway because any orderâas long as it is universally acceptedâallows us to transact.
Proof of Association: A more direct approach
Hereâs what weâve established so far:
First, Proof of Work, Proof of Stake, and so on are consensus systems designed to achieve voluntary agreement.
Second, before we even get to the "how" of consensus, we first need to choose who we want to be in consensus with, which, in turn, is based on who we want to interact and transact with.
Third, consensus is voluntaryâpeople reach consensus because it serves as a foundation for transacting with each other.
Given that, what if I could just describe who I want to be in consensus with and have an algorithm that keeps me in sync with the people Iâve selected?
Spoiler alert: You canâwhich brings us to the concept behind Proof of Association.
Instinctively, if we knew who we want to be in consensus with, all we would need to do is look at their ledger and make sure that ours is the same. If it is, weâre in sync; weâre in consensus. It is a little bit more complicated in practice, but not much.
The first step is to write down a list of those people or entities youâd like to be in consensus with.
Once you write down that list, you hand it over to a software program that will scan the network and listen for people on your list. When enough of those people vote for a particular ledgerâa quorumâconsensus is achieved. (Honest nodes commit to never changing their vote.)
Since youâre writing your own list, you donât need to worry about voting spam. If someone joins the ledger with 10,000 nodes that nobody cares about, they'll simply be ignored.
And because everyone participatingâvoluntarily, of courseâis incentivized to maintain and improve consensus, the system will naturally evolve toward a more robust and decentralized structure. That could mean:
- Adding more reliable people or entities to your list
- Removing unreliable people or entities
- Aligning your list to be similar to the lists of other participants
- Changing your list toward having a more diverse set of validators across people, organizations, and geographical locations
As a result, such a system will naturally iterate to create ever more trustworthy states. Just like our real-life interactions, trust is developed and strengthened over time. Someone might have a lot of influence over the network because they are included in a lot of other people's lists, but if, for any reason, they break bad and lose the trust of other participants, they can be quickly dropped by the rest of the network in a way that isn't typically possible with Proof of Work or Proof of Stake.
Here, the age-old adage appliesâit takes a lifetime to build a good reputation, but it can be lost in an instant. In that sense, the power of even the most important node is always limited. Just as a media outlet which consistently offers unreliable information might lose subscribers, so too will a bad validator. In a system based on voluntary association, there is always a choice.
What's more, if a validator has too much influence, others may proactively diversify their list even if that validator is perfectly honest and reliable. Over time, there is an incentive toward greater and greater decentralization. Or, more precisely, the level of decentralization that most participants think of as optimal.
It's important to note that we're only talking about a single consensus system so long as there is enough overlap between different lists. The overlap doesn't need to be perfectâin fact, the slight differences are what allows for improvements over time. Generally, participants don't want the network to split so everyone is incentivized to try to keep their lists relatively in sync through communication and discourse. If there are irreconcilable differences between groups, their overlap might decrease and they might eventually split into separate networks. This sounds bad, but is actually just a reflection of the preferences of the members of both groups choosing to separate from each other. Consensus is voluntary and can only be maintained as long as people want it to be.
In general, the network and community will ultimately determine for itself the best inclusions for their lists, which will continuously optimize over timeâa form of fluid, iterative democracy. You have your chosen representatives in your list. If the times change, you can vote for new ones at any time. Others who transact with you may notice your choice and change their selection in turn.
Writing lists doesnât use a lot of energy nor does it concentrate power.
And this isnât just theory. A consensus system based on this process has been operating for the last 10 yearsâthe XRP Ledger.
Whatâs cool is that over those 10 years, the network has evolved precisely in the ways I just described. Natural incentives mean that the XRP Ledger is consistently becoming more robust and decentralized.
Today, most participants follow 35 validators spanning geographies around the world, including individual participants, exchanges, universities, and companies building on the network, like my own company, Coil. No entity controls more than two validators, or 5.7% of the vote.
.png)
Unlike Bitcoin and Ethereum, the governance process is formal and voting happens in-protocol using the same consensus process that is used to confirm transactions.
Over the years, validators have successfully passed 45 amendments to improve the system, including new features such as multisign, escrow, and most recently, NFT support. New amendments are constantly being voted on.
But this is not just about XRP Ledger. If blockchains are to serve important functions in our society, advocates must have better answers to questions around energy usage and governance. Such were the weight of those questions when Ethereum made the bold step of actually switching their consensus system.
I hope that, ultimately, this will lead more people toward Proof of Association. It would not only solve the problems of energy consumption and concentration of power, but also serve as a simpler, more robust, and transparent method of governance for blockchains.
What started as a first principles observation of the consensus process becomes the mechanism itself. The beauty here is that in making the principles of consensus explicit, the consensus mechanism becomes obvious.
Â
All while Pfizerâa company with a $2.3 billion criminal fine for fraudulent marketing, bribery, and kickbacksâwas given blanket immunity from liability and billions in taxpayer dollars to produce a vaccine in record time with no long-term safety data.
