feat(protocol,supplementary-contracts): relocate & allow TokenUnlock to deploy and own ProverSets

[dantaik]

Allow Taiko's investors to use their locked tokens as bonds.

[openzeppelin-code]

feat(protocol,supplementary-contracts): relocate & allow TokenUnlock to deploy and own ProverSets

Generated at commit: c7f3fed5966ae4efbbf1db1a242165b43d1634a4

🚨 Report Summary

	Severity Level	Results
Contracts	Critical High Medium Low Note Total	2 2 0 8 41 53
Dependencies	Critical High Medium Low Note Total	0 0 0 0 0 0

---

For more details view the full report in OpenZeppelin Code Inspector

[Brechtpd]

Wouldn't this allow people to withdraw a big chunk of their tokens by getting slashed and then getting the reward?

I guess would have to think about the specifics and some protocol details, but for example if you can prove a block wrongly and directly also contest and prove it correctly in the same tx you would be able to extract a big chunk without any risks of anybody else getting the tokens. So sure you still lose a big chunk, but you also don't have to wait 4 years to get your tokens.

[dantaik]

Wouldn't this allow people to withdraw a big chunk of their tokens by getting slashed and then getting the reward?

I guess would have to think about the specifics and some protocol details, but for example if you can prove a block wrongly and directly also contest and prove it correctly in the same tx you would be able to extract a big chunk without any risks of anybody else getting the tokens. So sure you still lose a big chunk, but you also don't have to wait 4 years to get your tokens.

Good points. I believe technically it is possible. However, I think practically this won't happen for two reasons:

• 12.5% token will be lost during the contest-then-re-prove process.
• all of our blocks requires SGX, they must be able to generate incorrect but verifiable sgx proofs, then overwrite them with valid ones.

[Brechtpd]

Yeah true that if SGX is required for each block it shouldn't be possible, so should be good.

[Brechtpd]

I'm not 100% sure about the behavior for this in the protocol right now, but the liveness bond slashing could also be a potential way to avoid the locking. But that one is probably a lot trickier to pull off risk free.

[dantaik]

liveness

As of now liveness bond is the smallest bond compared with all other bonds. When liveness bond is returned, another larger bond must be placed. I think in the future, the liveness bond shall alway be smaller than validity/contestation bond.