Paper 2025/591
ColliderVM: Stateful Computation on Bitcoin without Fraud Proofs
Abstract
Bitcoin script cannot easily access and store state information onchain without an upgrade such as BIP-347 (OP_CAT); this makes performing general (stateful) computation on Bitcoin impossible to do directly. Despite this limitation, several approaches have been proposed to bypass it, with BitVM being the closest to production. BitVM enables fraud-proof-based computation on Bitcoin, relying on a $1$-out-of-$n$ honesty assumption. This left the question of whether it is possible to achieve computation under the same honesty assumption without requiring onlookers to ensure validity through fraud proofs. In this note, we answer this question affirmatively by introducing ColliderVM, a new approach for performing computation on Bitcoin today. Crucially, this approach eliminates some capital inefficiency concerns stemming from reliance on fraud proofs. For our construction, a key point is to replace the Lamport or Winternitz signature-based storage component in contemporary protocols with a hash collision-based commitment. Our techniques are inspired by ColliderScript, but are more efficient, reducing the number of hash evaluations required by at least $\times 10000$. With it, we estimate that the Bitcoin script length for STARK proof verification becomes nearly practical, allowing it to be used alongside other, pairing-based proof systems common today in applications.
Note: Minor revision
Metadata
- Available format(s)
-
PDF
- Category
- Cryptographic protocols
- Publication info
- Preprint.
- Keywords
- BitcoincollisionscovenantsMerkle treeBitVM
- Contact author(s)
-
victor k @ starkware co
avihu @ starkware co
moni naor @ weizmann ac il - History
- 2025-04-10: last of 2 revisions
- 2025-04-01: received
- See all versions
- Short URL
- https://ia.cr/2025/591
- License
-
CC BY
BibTeX
@misc{cryptoeprint:2025/591,
author = {Victor I. Kolobov and Avihu M. Levy and Moni Naor},
title = {{ColliderVM}: Stateful Computation on Bitcoin without Fraud Proofs},
howpublished = {Cryptology {ePrint} Archive, Paper 2025/591},
year = {2025},
url = {https://eprint.iacr.org/2025/591}
}
