OmiseGO Advances Plasma with its Latest Implementation

Quantstamp Announcements
January 27, 2020

Quantstamp is proud to announce that we have enhanced the security of OmiseGO’s More Viable Plasma (More VP). OmiseGO is a repeat customer of Quantstamp: their first audit with Quantstamp took place in Nov 2018 in which our security engineers reviewed More VP’s predecessor, Minimum Viable Plasma. 

The OmiseGO team requested that Quantstamp answer the following questions during their security review:   

Quantstamp discovered a denial-of-service attack vector and several low-risk issues in the initial review process. OmiseGO quickly responded with fixes and, as is customary in all of Quantstamp’s security reviews, Quantstamp then reviewed the suggested fixes and determined that they correctly addressed the initial vulnerabilities. 

Quantstamp also found that if a plasma user has many small UTXOs, it may make withdrawing funds to Layer 1 prohibitively expensive and also leave them open to having funds stolen by malicious plasma operators. OmiseGO stated that they plan to address this by regularly combining UTXOs on the application layer. 

What is Plasma?

Plasma is a Layer 2 technology in development that aims to scale Ethereum so that it can handle higher transaction rates by reducing the amount of data that is stored directly on the main Ethereum blockchain, also referred to as Layer 1 Ethereum. Plasma aims to create blockchains that exist “on top of Ethereum” that enable faster and cheaper transactions but that ultimately rely on the main chain for security.

How is More Viable Plasma different than Minimum Viable Plasma?

More Viable Plasma is designed to improve user experience. In Minimum Viable Plasma, when a user sends a transaction, their transaction is not finalized until they send a 2nd “confirmation message.” A user is only supposed to send this confirmation message once they recognize that their transaction was added to a plasma block. This additional step was required in order to secure their funds against malicious actors.  

In More Viable Plasma, users no longer need to send a confirmation message in order to finalize their transaction. In order to protect users funds in this new design, the exit game was modified. More VP’s exit game can be described as the economic incentives that are built into the way users withdraw funds from Layer 2 to Layer 1 in order to discourage malicious behavior.  

In More Viable Plasma, if a user wants to withdraw their funds from Plasma Layer 2 to Ethereum Layer 1, they must place a bond that can be claimed by other network participants if the user withdrawing funds is cheating the network. 

In order to claim the bond, network participants must provide proof that a malicious user is attempting to withdraw funds they have already spent. This game simultaneously incentivizes network participants to look for dishonest behavior while also disincentivizing potential bad actors from cheating the network. 

More Viable Plasma also included “in-flight exits.” This means that if a malicious operator refuses to add your transaction within a plasma block, users can still safely redeem their funds.  

About Quantstamp

Quantstamp is a Y Combinator-backed company building the standard in blockchain cybersecurity. With a team of security experts dedicated to securing decentralized systems, Quantstamp is enabling a future of safer and more reliable blockchain applications and helping enterprise companies deploy blockchain solutions with a security-first mindset.

Get your DeFi application secured by Quantstamp
Secure Now!
March 31, 2020

Quantstamp Joins MyID Alliance

Quantstamp is proud to join the MyID Alliance, a Digital ID initiative by ICONLOOP. As the world moves towards more online and less face-to-face interactions, Digital ID will be a key enabling technology. 

March 24, 2020

Market Dynamics of the 1st bZx Hack: Flash Loans and the Insolvent Loan

In this series, we describe the market dynamics of the 1st bZx attack so we can avoid attacks with market manipulation components in the future.

March 13, 2020

Top 3 DeFi Trends

This post discusses how flash loans, zaps, and DeFi aggregators are leveraging composability in order to simplify the user experience and ultimately make DeFi markets hyper-efficient.

March 11, 2020

Bringing Bitcoin to DeFi

DeFi is blockchain’s first killer app, with assets locked up approaching $1 billion USD. But one major asset is missing: Bitcoin. Bitcoin is not only the first crypto asset, but the largest - with over $168 billion USD of Bitcoin in circulation it has deep pools of liquidity. It is one of the least volatile cryptocurrencies and has a large network of fiat on and off ramps. All these properties make it a great crypto-collateral. We think Bitcoin has the potential to transform the DeFi landscape as the most widespread and liquid asset available today.