core icon indicating copy to clipboard operation
core copied to clipboard

Centralized Single Point Of Failure - TrustedBlockProducer

Open FreeTrade opened this issue 3 years ago • 5 comments

Currently only the holders of 5 keys may create new blocks on the BitClout chain, as listed in the "trusted-block-producer-public-keys" config value.

It is not clear how well distributed these keys are. At best, only 5 entities need to be compromised to have full veto power over what transactions are included in the chain. At worst, the five keys are under a central entity's control, and only one entity needs to compromised. This severely undermines BitClout's claim to be a decentralized platform. With permission based block acceptance, BitClout is more akin to a publisher than a decentralized platform.

Recommendation: Trusted Block Producer setup should be replaced as soon as possible.

FreeTrade avatar Jun 18 '21 03:06 FreeTrade