Depots: Theft-Proof, Self-Custodial Bitcoin For Billions Of Users

The concept of depots in the Bitcoin network aims to address significant challenges related to scalability and security. A depot enables thousands or even millions of users to own bitcoin off-chain through Lightning channels, with a very minimal on-chain footprint. This approach meets crucial requirements including low blockchain space usage, participation without substantial bitcoin holdings to cover on-chain fees, and maintaining security against theft despite potentially large numbers of off-chain transactions.

Depots operate by having an operator put a single Taproot output on the blockchain, which serves as the basis for creating numerous probabilistic off-chain Lightning channels. These channels are established through a combination of technologies and enhancements such as CheckTemplateVerify (CTV) and CheckSigFromStack (CSFS), with optional but beneficial support from PairCommit (PC), OP_MUL, and OP_MOD operations. Users interact with these channels mainly through the operator, avoiding the need for extensive coordination among large numbers of users. The design also incorporates mechanisms like griefer penalization to ensure cooperative behavior and secure operation, preventing either party from unfairly taking funds by imposing potential losses proportionate to any attempted theft.

The depot model introduces a time-limited component where users must drain their channels before a predefined expiry. Failure to do so could lead to scenarios where the operator claims all funds or, in cases of multiple hits (successful channel guesses matching the operator's target), all funds being burned. This setup incentivizes both operators and users to act honestly and efficiently manage their channels.

Security analyses show that depots inherit robustness from the characteristics of the Lightning Network. In the Lightning scenario, even though there might not be explicit financial penalties for griefing, the practical evidence suggests that such behaviors are rare due to reputational impacts and inherent incentives not to harm one’s own financial position. Depots extend this by explicitly defining griefing penalties, further aligning interests and enhancing security.

Furthermore, the technical structure of depots supports significant scalability. For example, calculations suggest that even under constraints of maximum active channels and user balances, depots can still facilitate a massive volume of transactions, far exceeding current capabilities. This is achieved while ensuring that each user's balance within the depot remains within specified bounds, preventing any single user or small group of users from disproportionately impacting the system.

In addition to technical specifics, the depot framework suggests modifications for dynamic allocation and reallocation of channels, addressing potential inefficiencies and optimizing resource use. Despite the promising features, depots do have limitations, including reliance on specific protocol behaviors and assumptions about user and operator incentives, which may not hold universally.

Overall, the development of depots represents a forward-thinking solution to some of Bitcoin's most pressing issues regarding scalability and security. By leveraging and extending proven concepts within the Lightning Network, depots offer a pathway toward enabling widespread, secure, and efficient use of bitcoin for a vast number of users across the globe.