Introduction Thank you, good morning everybody. I'm going to talk about our latest version of our Abitrum system. The first version was discussed in a paper in 2018. Since then, there's a lot of advances in my technology and a real running system has been made. This is the first working roll-up sys...

Introduction Matteo got sick and couldn't come. His coauthors couldn't come either. So a talk was pre-recorded and will be played now. Our work is about realizing atomic multi-channel updates with constant collateral in bitcoin. Scalability issues We all know that blockchains have scalability is...

Introduction Alright let's get started with the next session. Vitalik is from Canada. He is a former writer for Bitcoin Magazine and can often be seen wearing unicorn shirts. He will be telling us about "Beyond 51% attacks". Take it away. Okay, so hello everyone. Hi. Okay. I will start by remindin...

An Axiomatic Approach to Block Rewards # Introduction Thank you, Bram. Can you hear me in the back? I want to talk about some work I have been doing with my colleagues. This is a paper about incentive issues in blockchain protocols. I am interested in thinking about whether protocols have been...

# Introduction Redundancy can be a useful tool for speeding up payment channel networks and improving throughput. We presented last week at Financial Crypto. You just received a nice introduction to payment channels and payment channel networks. # Payment channels Alice and Bob are connected thro...

Brick: Asynchronous State Channels # Introduction I am going to be presenting on Brick for asynchronous state channels. This is joint work with my colleagues and my advisor. So far we have heard many things about payment channels and payment channel networks. They were focused on existing chan...

# Introduction Hello everyone. My name is Marek Olszewski. We are going to be talking about Plumo which is Celo's ultralightweight client protocol. This is joint work with a number of collaborators. # Plumo Plumo sands for "feather" in esperanto. I hope most people here are familiar with this gra...

ClockWork: An exchange protocol for proofs of non-front-running # Introduction Clockwork is an exchange protocol for proofs of non-frontrunning. # Exchange systems Exchange systems let you trade one asset for another asset at a certain price. It's simple and it's supposed to be fair. In this w...

See also "Stress testing decentralized finance" Introduction There have been some odd finanical attacks in the DeFi space and also on staking. This talk aims to show that the threat model for staking is definitively different from that of proof-of-work, and these financial attacks need to be par...

Introduction I am Fan from Cornell. I am going to be talking about DECO, a privacy-preserving oracle for TLS. This is joint work with some other people. Decentralized identity What is identity? To use any system, the first thing that the user needs to do is to prove her identity and that she is ...

Introduction I am from Tel Aviv University and now we have a 1-year old company called Cotera which is located in Berlin, Seattle and Tel Aviv. Our mission is to bring formal methods into code security and I will talk to you today about how we use this method to find bugs. And actually, I try to ma...

Introduction One of the most powerful things that you can do with SNARKs is something called recursive proofs where you actually prove that another SNARK was correct. I can give you a proof of a proof of a proof and this is amazing because you can prove an ever-expanding computation like a blockcha...

Introduction I am going to talk about accelerating RSA operations in hardware. So let's just get into it. Outline I'll talk about what acceleration is and why we're interested in it, then we'll get into RSA primitives, then we'll get into algorithms, and then various platforms for hardware. Hard...

paper: Introduction This is going to be talking about linking anonymous transactions in zcash and monero. Thanks for the introduction. I am going to be talking about remote side-channel attacks on anonymous transactions. This will be with respect to zcash and monero. Full disclosure, we disclose...

Introduction Okay, thank you. The title of my talk is exploring the limits of plasma. This is joint work with others. Plasma Let me start by telling you about Plasma. It's a family of layer 2 solutions for scaling blockchain. It was proposed in 2017 by Poon and Buterin. It's a family of protocol...

Introduction This work was done in my capacity as technical advisor to Chainlink, and not my Cornell or IC3 affiliation. Mixicle is a combination of the words mixers and oracles. You will see why in a moment. DeFi and privacy As of a couple of weeks ago, DeFi passed the $1 billion mark which is ...

Introduction Thanks, Byron. Glad to be here. My name is Dominic Williams. I am founder of the internet computer project at Dfinity Foundation. Last year we talked about consensus protocols. Today we are talking about tools for building on top of the internet computer which is great news and shows t...

The best incentive is no incentive # Introduction This is the last session of the conference. Time flies when you're having fun. We're going to be starting with David Schwartz who is one of the co-creators of Ripple and he is going to be talking about a controversial topic that "the best incenti...

paper: Introduction One of the things you need when you design a zk proof system is that you need to know about polynomials. Two polynomials if they are the same then they are the same everywhere and if they are different then they are different almost everywhere. The other thing you need is how...

Introduction Hello everyone. I am excited to be here to talk about our implementation and evaluation of the Prism consensus protocol which achieves 10,000x better performance than bitcoin. This is a multi-university collaboration between MIT, Stanford and a few others. I'd like to thank my collabor...

Introduction It always seems like there's a lot of different proof systems, but it turns out they really work well together and there's great abstractions that are happening where we can take different tools and plug them together. We will see some of those in this session. I think STARKs were firs...

Welcome remarks telegram: wifi: Stanford, blockchain/blockchain Okay, we're going to get started in five minutes. We're going to get started. We have a fully packed day. Everybody can grab their seats and then we can get started. Alright. So let's do this. Okay, welcome to the fourth Stanf...

Broken Metre: Attacking resource metering in EVM Daniel Perez, Benjamin Livshits # Abstract Metering is an approach developed to assign cost to smart contract execution in blockchain systems such as Ethereum. This paper presents a detailed investigation of the metering approach based on gas t...

# Introduction Alright, thanks everyone for being here. Let's get started. I am part of a project called Forte which wants to equip the game ecosystem with blockchain finance for their in-game economies. This is a unique set of constraints compared to what a lot of people are trying to build on blo...

See also Previous talk: Introduction Let's start with something familiar. When you have a new lite client, or any client that wants to trustlessly connect to the network and joins the network for the first time... they see this: they need to download a lot of data, initially, and then on an o...

Introduction Thanks. I am the last talk of the session so I better make it interesting, and if not interesting then short at least. I am going to talk about proof-of-stake. This is collaboration with a few people. Vivek Bagaria, ... et al. Proof-of-stake prism The starting point of this project ...

Introduction Groups of unknown order are interesting cryptographic primitives. You can commit to integers. If you commit to a very large integer, you have to do a lot of work to do the commitment so you have a sequentiality assumption useful for VDFs. But then you have this compression property whe...

Coded Merkle Tree: Solving Data Availability Attacks in Blockchains # Introduction I am going to talk about blockchain sharding via data availability. Good evening everybody. I am Sreeram Kannan. This talk is going to be on how to scale blockchains using data availability proofs. The work in t...

((.... stream went offline in the other room, had to catch up.)) Show you new consensus protocol called streamlet. We think it is remarkably simple intuitive. This is quite a bold claim, hopefully the protocol will speak for itself Incredibly subtle, hard to implement in practice. We want to take ...

Introduction We're building a new wallet for the system, Calibre, which we are launching. A bit about myself before we get started. I have been at Facebook for about 10 years now. Before Facebook, I was one of the co-founders of reCaptcha- the squiggly letters you type in before you login and regis...

Introduction Okay, let's get started our afternoon session. Our first talk I am very happy to introduce our speaker on optimistic virtual machines. Earlier in this conference we heard about optimistic roll-ups and I'm looking forward to this talk on optimistic virtual machines which is an up-and-co...

Introduction The last two talks are going to be about frontrunning. One of the features of blockchain is that they are slow but this also opens them up to vulnerabilities such that I can insert my transactions before other people and this could have bad consequences and Shayan is going to explore t...

paper: Introduction Our next speaker is Ben Fisch, part of the Stanford Applied Crypto team and he has done a lot of work that is relevant to the blockchain space. Proofs of replication, proofs of space, he is also one of the coauthors of a paper that defined the notion of verifiable delay funct...