[bisq-network/proposals] Off-chain trade protocol for small amounts using merit, bonds and proof of burn (#324)

[chimp1984]

> _This is a Bisq Network proposal. Please familiarize yourself with the [submission and review process](https://bisq.wiki/Proposals)._

I would like to propose a model for off-chain trade protocol inspired by the [off-chain keybase channel experiment](https://bisq.wiki/Keybase-Buy_Bitcoin) of @pazza83. It will have some limitations and will work only for lower amounts, but I think it could help in that area where the high capital requirements for collateral and high miner fees hurt most.

## Overview:
- Seller is maker and does not need to pay trade fee and do not need to reserve funds
- A buyer taking the offer need to send the fiat first, and once the seller has received it they send the BTC (outside Bisq trade protocol, could be done via any wallet or even LN if both agree). Buyer do not pay a trade fee (also no tx fee as buyer is receiver of the BTC). The price premium covers the sellers costs on fees (see below), so the fees are indirectly shared via the trade price.
- A seller gets permission via a combination of DAO merit, bonded BSQ and burned BSQ via proof of burn. The burned BSQ serve as replacement for the trade fees. Merit is hardening security as for a scammer its much harder to earn BSQ by contributions rather than to only buy BSQ for a bond. The bond enables punishment if the seller is a scammer (can be burned via DAO confiscation request).
- I think limiting it to Fiat is enough as for altcoins there are no low trade limits causing those problems with too high relative costs on miner fees and collateral requirements.

## Suggested parameters:
- Required merit: 10 000 BSQ
- Required bond: 10 000 BSQ locked up for 4 months
- Burned BSQ via proof of burn: 100 BSQ/month
- Max trade amount: Equivalent to 300 USD
- Max trade duration: 4 days

## How to implement it:
The merit, bond and the burned BSQ can be verified in the app (requires the DAO to be activated and synced). Only if those requirements are met a user can make sell-BTC offers. The peer will verify offers as well.

Integrating it into the offerbook, trade domain and UI is a bigger challenge. It comes with similar problems like the BSQ atomic swap project @sqrrm is working on. The current offer/trade domain is tailored around the current trade protocol and data structures. There is no easy way to extend and change that as it has implications all over the place (mediation, trade history, statistics,....).
One approach is to try to squeeze in the new model into the existing, but that will lead to lot of technical debt and ugly code.
To generalize the existing domain to the extent required here is also pretty challenging.
Another approach is to build a parallel more generic infrastructure. The benefit here would be to be more flexible for other future protocols like XMR atomic swaps. 

So unfortunately the dev effort for integrating that is quite large.

## Risks:
- There will be only a few such sellers and they can collect more user data as normal users. On the other hand there is privacy gain on the BTC blockchain side as the trade protocol has no fingerprint in the blockchain anymore. Still the sellers wallet once identified can act as root for finding potential Bisq users addresses. CoinJoin would help here but adds more miner fee costs.
- Sellers might get issues with banks and activity might be considered as a profesional activity requireing licensing. Sellers have to check for themself to not take any legal risks. 
- Sellers lose privacy as their permission is linked to the GH identity for the merit. This identity can be still anonymous but real anonymity is hard...
- The bond might not cover the potential losses if a seller is a scammer and if open parallel trade amounts exceeds the bond. I think this risk can be communicated to the buyer and be made clear that this trade option carries higher risk than the normal trade protocol. If buyer agrees they carry the risk. I think if we mix in enough merit requirement the realistic risk for scam is very low.





-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/bisq-network/proposals/issues/324
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.bisq.network/pipermail/bisq-github/attachments/20210316/dc16b7a2/attachment.htm>