I've been wondering how @BabylonLabs_io can execute slashing without any smart contract.
The answer is EOTS — Extractable One-Time Signature — based on native Bitcoin Schnorr signatures.
The finality provider submits a public random nonce before voting. When signing the block, they use a secret nonce paired with that random value. If they double-sign at the same height, anyone can combine the two signatures and extract their private key. The extracted key then signs a pre-approved slashing transaction, sending the slashed portion to a burn address and refunding the remaining funds to the stakers according to the protocol rules.
The staking contract is written using Bitcoin’s script itself. No wrappers, no cross-chain bridge, no custodians.
The current design mainly targets provable security violations like double-signing, rather than availability issues such as downtime. This is an intentional architectural choice.
#baby $BABY
The answer is EOTS — Extractable One-Time Signature — based on native Bitcoin Schnorr signatures.
The finality provider submits a public random nonce before voting. When signing the block, they use a secret nonce paired with that random value. If they double-sign at the same height, anyone can combine the two signatures and extract their private key. The extracted key then signs a pre-approved slashing transaction, sending the slashed portion to a burn address and refunding the remaining funds to the stakers according to the protocol rules.
The staking contract is written using Bitcoin’s script itself. No wrappers, no cross-chain bridge, no custodians.
The current design mainly targets provable security violations like double-signing, rather than availability issues such as downtime. This is an intentional architectural choice.
#baby $BABY
🤔 过于复杂
80%
🔥 EOTS genius
20%
5 votes • Voting closed