It is interesting to know that Bitcoin is not the only cryptocurrency. Bitcoin has been making series of headlines and it is just one of the cryptocurrencies.
There is another digital currency known as Ethereum. In other words, Bitcoin and Ethereum are both a digital currencies that run on an application platform.
Ethereum stores transaction data and application logic, in the Blockchain. Blockstack, on the other hand, is an application platform, but not a digital currency. Its blockchain implementation is an overlayer or virtual chain of existing cryptocurrency blockchains.
However, the security risks of running these different Blockchain platforms is a major concern. There are three concerns; security risks of running untrusted code, the scalability bottlenecks of decentralized blockchain networks, and the general level of resilience inherent in the application platform.
Alid Castano, US Blockchain technology Enthusiast in response to the question, shares his views on Blockchain technology security concerns.
Running Untrusted Code
The ultimate goal of blockchains is to allow the exchange of valuable, scarce data — i.e. digital property — without the need for a third party to oversee each transaction.
This only works, however, if you can effectively prevent malicious parties or accidental bugs from tampering with the system. And the main way this vulnerability is exploited is via untrusted, third-party code.
There are two main factors that determine the risk of running untrusted code: first, the completeness of the scripting language, second, the location where the code is executed.
Ethereum allows for a turing-complete language, which means that its developers are able to write contracts with a language capable of expressing all tasks accomplishable by computers (compare that to Bitcoin whose scripting language can be more adequately compared with the capabilities of a spreadsheet); furthermore, Ethereum executes this code within its blockchain.
In essence: untrusted third parties are equipped with an expressive language they could use to directly manipulate the underlying blockchain.
Ethereum guards against this security concern via other measures, such as transaction fees that limit the execution time of contracts, but the inherent, possibly uncaught vulnerabilities exposed by its design still remain.
Blockstack, on the other hand, humbly takes a less ambitious approach: it only exposes a predefined set of operations that are vetted and executed by its virtual chain.
Only after being safely executed is the resulting transaction data stored in the underlying blockchain.
Scaling Decentralized Blockchain Networks
Blockchain protocols have a challenging limitation: every fully participating member in the network must process every transaction.
Due to this, as a blockchain grows, it becomes more expensive, both in terms of time and money, to handle more transactions. So if you want your dApp’s transactions to remain fast and cheap, the scalability of the platform has to be a top concern.
There are two main ways to think about the blockchain scalability: on-chain scalability (inside of the blockchain) and off-chain scalability (outside of the blockchain).
In a traditional, centralized database system, this difference would be trivial — as transactions increase, you can just invest in more servers for more computing power.
But in a decentralized blockchain, you have little control over the computing power of fully-participating peers in the network, yet you still need to ensure a diverse majority of them can process each block to prevent the centralization of power.
The seemingly unavoidable trade-off of low transaction throughput and a high degree of centralization is what makes on-chain scalability difficult for blockchain systems.
The safe bet is to circumvent the problem by making minimal use of the blockchain. This is the path Blockstack takes–the only data stored inside its underlying blockchain are critical data bindings.
This provides a shared source of truth, i.e. to verify who owns what, while allowing all other computation and storage to be handled by already proven internet infrastructure.
For example, for application storage, Blockstack allows users to configure multiple storage providers, such as Dropbox and IPFS, where data is encrypted and backed up.
Ethereum, on the other hand, makes heavy usage of the blockchain — all transaction data and smart contracts are stored inside its blockchain.
Due to this, scalability issues need to be handled there as well, which makes scalability extremely challenging. In order to scale, Ethereum developers are going to have to overcome on-chain scaling difficulties that distributed systems researches have been wrestling with for decades.
The Resilience of the Application Platform
Since the outcome of any single cryptocurrencies is still largely uncertain, you ideally want to pick the application platform that will be the most resilient to any blockchain failure.
For example, if a hard-fork or 51% attack is performed on the dApp platform’s underlying blockchain — how quickly will it be able to recover, if at all?
Ethereum developers are betting on the resilience of the Ethereum blockchain. As explained above, due to Ethereum’s ambitious design decisions, it has a larger surface area for attacks.
This is especially alarming because blockchain designs are intrinsically irreversible. If a hacker discovers a flaw in Ethereum or in a deployed smart contract, they are free to attack it as long and hard as they can.
Past attacks have demonstrated how limited defenses are: perform a community-splitting fork to freeze the funds (as done in the DAO attack) or, if the theft can’t be reversed, hack the remaining vulnerable contracts before the attacker does (as done in the $31M Parity multisig wallet hack).
And, since protocol changes require the majority agreement of all miners, any fixes post-attack happen slowly and end up being disruptive to the ecosystem.
Meanwhile, Blockstack developers are betting on the resilience of Blockstack’s virtual chain which can operate on any blockchain — if the blockchain of their chosen digital currency becomes unsafe, they can migrate.
In fact, Blockstack has already proven their ability to outlive their underlying blockchain: it successfully migrated from Namecoin to Bitcoin, when they discovered a single miner had more than 65% computing power.
Since then, Blockstack has resolved to always operate on the most stable and safe digital currency, which so far has continued to be Bitcoin. (In the future, Blockstack plans to support multiple digital currencies and enable operations across them, but we’ll leave that aside for now.)
Furthermore, as a layer 2 protocol, Blockstack can deploy changes to their platform independently of the underlying blockchain. So if any vulnerabilities are discovered, Blockstack can react faster to patch things up.
Conclusion
DApp platforms are in their early stages. The advantages Ethereum dApps have right now are Ethereum’s market value and dApp ecosystem. But both Ethereum and Blockstack dApps are yet to be truly tested at large scale. Only time will tell what will happen but what’s evident right now is that their implementations stand in stark contrast to each other.
Pls Share
-
-
Click to print (Opens in new window)
-
-
Click to share on Pocket (Opens in new window)
-