Building a CoinPool with OP_CHECKCONTRACTVERIFY

CoinPool represents a multi-party construction aimed at significantly improving the scalability of bitcoin transactions and user onboarding. This scheme necessitates consensus changes such as TAPROOT_LEAF_UPDATE_VERIFY or OP_MERKLE_SUB to facilitate efficient operation. It operates by defining a coinpool instance with public keys and associated balances maintained on-chain through UTXO and off-chain via pre-signed transactions that represent users' balances. These transactions can be replaced for off-chain transfers between pool accounts, requiring unanimous approval from all participants. Upon updating the off-chain pool state on the chain, users can withdraw their funds recursively and non-interactively.

OP_CHECKCONTRACTVERIFY (OP_CCV) offers a technical foundation for implementing any-order recursive withdrawal mechanisms within a CoinPool design. The opcode requires five stack elements for evaluation, including mode, taptree, naked key, input/output index, and an arbitrary data buffer. By using specific modes, it's possible to ensure outputs are encumbered by expected taptrees and internal public keys, facilitating secure and verifiable withdrawals. However, this method encounters practical limitations when expanding beyond a small group of participants due to the exponential increase in required withdrawal transactions, highlighting a significant challenge for scalability beyond a certain pool size.

Open questions remain about integrating OP_CCV with other opcodes for enhanced functionality, such as introspection on the data argument to deduce the necessary components (public key, tree, amount) for withdrawal transactions based on the input state. This raises concerns about the feasibility of making such a mechanism tamper-proof and whether alternative approaches like MERKLESUB and OP_TLUV might offer more efficient solutions in terms of witness space utilization. These considerations underscore the nuanced trade-offs involved in utilizing OP_CCV for UTXO-sharing applications like CoinPool and suggest that while promising, its applicability may be better suited to other use cases within the Bitcoin protocol.