Ethereum Foundation Danny Ryan: Thoughts on Key Issues for Ethereum in 2023
++Reflection++ ++2023++
Author: Danny Ryan (Ethereum Foundation Researcher)
Compiled by: Qianwen, ChainCatcher
After Ethereum completed what I believe is the most important upgrade in blockchain history, our forward direction successfully shifted to extraction and primary scalability upgrades, facing many key tasks and upgrades in the coming years. At this time, the "Ethereum killers" waver in the uncertainty of the bear market, while Bitcoin culture and technology struggle in a void, but Ethereum demonstrates unprecedented strength as we continue to build, refine, think, and make an impact.
The technical roadmap ahead is long and complex, but I am not worried about our execution and timeline. We have proven that we can deliver at a high level and confirmed that the Ethereum ecosystem is moving in the right (and difficult) direction, making Ethereum more resilient at all levels. Industry fraud is rampant, but Ethereum stands firm. Even deep in the bear market, Ethereum continues to foster builders and innovation. In an increasingly turbulent global landscape, Ethereum has found ways to make an impact in key areas.
My reflections will focus more on survival issues— the health of the L1 ecosystem, capture, cartel, alignment with Layer 2, and so on.
1. Technology: The Road Ahead is Long
Ethereum has proven that it can not only achieve massive technical goals but can do so in a largely decentralized manner. The merge is a unique achievement— no other project has accomplished such complex technology, high-level execution, and global decentralization.
The transition to PoS took longer than we anticipated. When I first started working at EF, Aya Miyaguchi asked me in the spring of 2018 when we would complete the PoS work. My answer was "8 months," but for many reasons, it ultimately took us longer to achieve a multi-layer, multi-client, resilient ecosystem and protocol capable of enhancing staking decentralization that other blockchains might not even reach.
Just take a look at Vitalik's roadmap document, and you will realize that before the protocol is considered "complete," we still need to go through many long and complex years (5 years, 10 years). We should not be complacent about the delivery of the merge protocol but rather leverage this momentum, expertise, tools, and processes to tackle the many challenges that still exist.
But what does "complete" mean here? It reflects in various aspects— finding sufficient end status. Clearly answering what constitutes sufficient functionality, sufficient security, sufficient decentralization, and so on. The key is to be clearer ideologically and technically about what needs to be optimized and what the minimum thresholds are. Clarifying these aspects will help us determine priorities and make the right trade-offs between complexity/functionality in the coming years, and I will also discuss how this benefits us in the solidification process.
Current Technical Concerns
1.1 Evolution of PoS
There is a wealth of research and explanatory materials on aspects such as Proposer/Builder Separation (PBS), LMD-GHOST confirmation rules, Single Slot Finality (SSF), Single Secret Leader Election (SSLE), Proof of Custody (PoC), Proof of Execution (PoE), and early RANDAO reveal reductions, all aimed at evolving Ethereum's PoS into its final, most secure, and sustainable form.
Most of the above relates to reducing or eliminating gameability, the pain points of cartel existence, the tragedy of the commons (editor's note: a social trap involving conflicts between individual interests and the common good in resource allocation), and credit assumptions— strengthening the protocol even under extremely adverse conditions. While the network can ultimately recover, it is still essential to ensure that the protocol can handle the widest range of attack scenarios without interference.
1.2 DAS in Practice
Data Availability Sampling (DAS) is a beautiful mathematical solution to the data availability problem. However, instantiating it efficiently and robustly in practical p2p network construction is not easy. In 2022, many teams joined the effort to solve this problem— including academic and practical engineering— but there is still much work to be done to achieve a sufficient solution.
This problem is not tricky, but the scope of design is quite large, making it difficult to quickly reach an appropriate balance between complexity and robustness. If we are willing to compromise on decentralization and robustness, DAS can reuse existing network components and work properly in suitable cases. Given that attacks on this network structure could completely undermine the chain's validity, we must not only design a workable system but also design a system that is as resilient as other aspects of the protocol.
EIP-4844 lays the groundwork for scalability data and provides us with a parameter data-gas limit that adjusts as DAS handles more load. I believe we should cautiously increase this parameter, such as setting the data-gas limit far below the theoretical limit, running DAS in parallel for a period to achieve complete 4844 downloads, and achieving extremely high network redundancy, etc.
The order in which DAS will be rolled out compared to many other competitive upgrades is still up for debate— statelessness is another obvious major competitor. My intuition is that DAS will need more time to mature, focusing on non-scaling upgrades in the 12 months following 4844 (statelessness, security improvements, PBS, etc.), while observing the mainnet and potentially integrating with more advanced gossip technologies (like episub) before raising the data-gas limit from the initial parameters.
2. MEV— Pandora's Box
One of the core themes over the past 24 months has been Maximum Extractable Value (MEV)— not only its impact on the application layer but also on Layer 1 consensus and security. It's like opening Pandora's box. MEV turns what we thought (and hoped) were simple matters into complex issues composed of incentives, attacks, and more. MEV brings centralizing effects to the validator community, with rewards for cartels significantly higher than before, directly incentivizing reorganization and introducing a host of new PvP players, complicating the simple user-validator model.
MEV has a certain impact on what needs to be accomplished before Ethereum can be considered "complete." The protocol must recognize the existence of MEV; otherwise, these incentives will undermine network stability and could potentially destroy the network. This requires implementing some mitigations, such as Proposer-Builder Separation (PBS), MEV burning, SSF, and anti-censorship measures in the context of PBS.
Should we quickly implement MEV mitigation measures (after all, the threat is real) or spend more time researching the issue first and then propose solutions? I am hesitant. I worry that, despite our leaps in understanding this area, research is still in its early stages, and what we can build today may not meet Ethereum's long-term needs.
I feel that perhaps we cannot "take our time" because the inherent incentives in the MEV space have led to the establishment of a series of solutions, networks, and products that are often rapidly adopted and impactful. If we do not act quickly, third-party solutions and activities will define and potentially threaten our existing key norms.
2.1 Complexity
This issue is tricky. Ethereum is complex and will only become more so. I worry that this dynamic system may become too complex now or in the future for us to handle, reason about, or ensure its security.
In all possible scenarios, modularity is crucial for managing system complexity. We have "fallen into" the separation of execution and consensus, with many complexity issues obscured because we use libp2p at the (consensus) network layer and powerful, audited/verified libraries at the cryptographic layer.
This way, each component can be corrected individually, and the relevant individuals and teams become more specialized, ultimately aggregating into a more complex whole.
Moreover, the capacity of the core protocol should not exceed the levels required in any domain, as this would introduce unnecessary complexity.
3. L1 Coordination Game
3.1 Development of L1
Over the past five years, we have made leaps in our ability to perform complex upgrades to the protocol, with the number of participating teams and individuals increasing fivefold, becoming more resilient in both software and ideas. Not going it alone remains key to the healthy development of the protocol.
The client ecosystem at the consensus layer, the diversity of expertise, and the variety of use cases are significant advancements. The client ecosystem at the execution layer initially faced many asymmetry issues and will require more time to reach similar levels of expertise and reliability. However, I believe we are ready in 2023 to change the phenomenon where 80% of the mainnet is dominated by GETH. In fact, the merge is a turning point here.
3.2 Incentives
At the peak of the bull market, I and many others were very concerned about the incentives for working on Ethereum L1, whether compared to Ethereum's application layer and L2 or to other L1 competitors. All alternatives have token incentives, which have high upside potential and are associated with highly liquid products.
During the bull market, the valuations of liquid products were high. Therefore, we faced actual personnel turnover, along with a more subtle and growing dissatisfaction stemming from the vast difference between working on critical infrastructure and building on it. I am not sure if I articulated this clearly at the time, but looking back, people felt both bitter and dissatisfied about the immense wealth accumulated by L1 teams. Regarding L1 alternatives, some claimed that this misaligned incentive mechanism is a fundamental factor in blockchain development, and L1 alternatives will always be the driving force to suppress and eliminate old L1s. These arguments were naive even then, but their impact and negative sentiment continue to grow.
Now there are many positive developments in L1 development incentives. The protocol guild's year-long pilot has raised over $12 million for more than 120 members across 20+ teams. The funding experiment for traceable public goods may at least prove that some applications and L2-dependent software are available and secure. Other funding mechanisms, such as Gitcoin and clr.fund, continue to innovate to support public goods across the ecosystem. Additionally, other funding experiments at the social level have great potential, such as optional staking transaction fee/MEV split contracts (e.g., 1% of your staking transaction fee goes to your client).
3.3 Capture
There are now several resource-rich, well-operated entities that are not only interested in the success of the Ethereum protocol but also wish to control Ethereum. They currently do not seem to exhibit malice, but they do have a significant influence on the protocol's development. To this end, L2s, VCs, exchanges, and dapps have joined the process of L1 governance and development. We are in a unique period where stakeholders related to Ethereum are becoming more numerous and clearer. However, many areas of the protocol are still insufficient by any standard and have not yet solidified. This poses significant risks for the coming years.
A few years ago, these interested, mature/resource-rich entities did not exist at all or did not consider "helping" and joining. They were mainly various independents in dialogues involving EF, client teams, and the core protocol. If, in a few years (3? 5? 10?), parties step forward to offer help, the protocol may become more solidified, and interested parties will face less risk when providing assistance.
In fact, for entities that rely on the health and stability of the Ethereum network, ownership of critical infrastructure may be a long-term necessity. Currently, ownership of infrastructure means having a voice in an early protocol. Ultimately, the protocol's plasticity components will become smaller and less significant, referring to elements around the core such as network protocols, lightweight client communications, content delivery networks, etc. However, there are still significant interests at play in this regard, and the protocol may still be manipulated through less solidified, chaotic, human upgrades.
Given the increasing number of interests, there is a desire to find a balance that allows non-client developers/non-researchers to have a voice in governance. Attempting to gatekeep for everyone is challenging because, in fact, there has never been a real standard— if you show up and do the work with integrity, you will be welcomed. New entrants have increasingly complex backgrounds and motivations, which can even affect core maintainers as conflicts of interest multiply— investors in applications/L2s, representatives of DAOs, advisors from venture capital firms, enterprises, and providers of various products; not to mention the growing attention of global geopolitics on cryptocurrencies and the influence of various geopolitical relationships.
I firmly believe that any formalization beyond "developers write code, users run software" poses a long-term existential threat to Ethereum. I have seen calls within the community to establish structures similar to political parties or lobbying interest groups. The more structure this process has, the easier it is for these structures to be abused (captured) and become less likely to be removed (anti-solidification).
Reaching consensus is not easy, but we are working towards a more robust protocol that is sufficiently solid, resilient, and protected against capture. I suggest that we add as few additional governance structures as possible in the next five years, while focusing more on softer aspects such as ideological consensus, building a strong culture that focuses solely on task upgrades, and facilitating two-way communication between developers and the scaling community in less formal forums. In other words, the governance process is a beast that can be managed but not directly controlled. Individuals can influence outcomes here through guidance and thought, and if things truly go off course, they can speak up loudly, but Ethereum governance is an independent organism that no single party can control at present.
3.4 Client— Buy or Build?
Even if the protocol's development and upgrade process is confined to the "developers write code, users run software" model without adding new formal structures, engaging in and maintaining clients remains the entry point for anyone to enter the dialogue and process.
As we saw in 2022, this can be accomplished through buying (Arbitrum -> Prysm) or building (Paradigm -> reth), each with its own difficulties, legitimacy, and sustainability. For example, buying a client is relatively straightforward, but legitimacy may be sacrificed, and the sustainability of impact is extremely low— clients are composed of individuals, and before individuals leave or defect, the acquiring company may only change priorities and viewpoints. Building a client is much more challenging but is more legitimate and enduring. Both experiments are worth watching in 2023.
Ethereum's development and governance rely on a security-first, ideologically aligned development culture. My assessment is that, in the current configuration, it will be difficult for one or two wildcard client teams or individuals to change the path or feature set in what we call "capture," as the entire team's ability to evaluate the pros and cons of suggestions is limited and constrained by their own ideologies to determine priorities and direction. What I worry about is the emergence of situations where new entrants deviate from "consistency" with others in the client team, or where some existing, ideologically aligned client teams leave, or more client teams are acquired or created by entities with less ideological alignment in the coming years.
The multi-client spirit and ecosystem are one of Ethereum's superpowers, introducing numerous software and perspectives, bringing more resilience, legitimacy, and security. This is one of the ways Ethereum brings various intellects and ideas, and it is also one of the main feedback loops that make Ethereum strong. I do not recommend imposing restrictions on joining such informal client teams. On the contrary, I suggest keeping the doors open and explicitly welcoming more highly unified client teams to join in the coming years. While doing this, it would be even better to enhance the geographic and jurisdictional diversity of Ethereum client teams, as there are still regions globally that are overrepresented and underrepresented. Deepening global client representation will make Ethereum more resilient while further expanding its intellectual sources.
4. Solidification
Bitcoin has sullied the concept of solidification. Solidified Bitcoin is viewed by the Ethereum community as a useless protocol, maintained by a group of people with religious fervor, who do not adhere to any rational path that does not glorify Bitcoin's perfection or disparage other designs. This indeed raises a question— is it due to the uniqueness of the solidified thing (in this case, Bitcoin) or due to the act of solidification itself? My intuition is that the religious anti-intellectualism stems from Bitcoin's inadequacies. The Bitcoin protocol is insufficient to meet its demands, and thus the reasoning of its supporters has become distorted to support its solidified state.
I believe that a protocol capable of fulfilling its tasks (in our case, being secure, scalable, and sufficiently capacious) can coherently argue for the solidification of its outcomes. Therefore, the surrounding community does not need to fall into religious fervor to defend this choice. Moreover, in our case, I believe that the liquidity and scalability supported by solidified protocols allow the community to explore and optimize at higher levels, thus maintaining intellectual engagement.
That said, some community members worry that without a continuously evolving protocol, Ethereum will lose its allure, no longer be esteemed by intellectuals, and many things that make it so special and vibrant will lose their luster. I believe that as long as the second layer provides sufficiently rich support, we can gain benefits— solidifying on a secure foundation while still supporting active intellectual exploration and optimization at higher levels within the ecosystem. At least, that is our dream.
4.1 Is Solidification Foolish?
But is solidification a foolish practice? Can it really be achieved in the context of Ethereum? And how can solidification be useful? Must solidification be absolute, or can we "comparatively solidify" to gain most of the value? Ultimately, is sufficient intent for solidification enough to protect us— does the imminent threat of solidification keep the process on the critical path, ensuring alignment, and strengthening the immune system against special interest groups and capture?
I do worry that achieving solidification in any near future is unrealistic. Because there is still a long list of upgrades and security improvements to be completed— sharding, PoS evolution (SSLE, PBS, etc.), security improvements (SSLE, guardian games, proof of execution, etc.), statelessness, ZK-EVM, post-quantum cryptography, and so on. Given the complexity of the tasks at hand and the general pace of rollout, the time required will not be less than 5 years, or even 10 years. I worry that advancements in cryptography and newly emerging issues will cause this list to continue to grow and change in the foreseeable future.
So, if this is an endless process, will the pace of change at least slow down? Perhaps a more effective definition of solidification is that it is a trend rather than an end result— it should become increasingly difficult, requiring more justification, effort, and time to incorporate any changes into the protocol. The protocol will not truly solidify; our greatest effort is to maintain a dialogue with solidification. If we are always trying to solidify or be in a more solidified state, rather than always expecting, yearning for, or seeking change, then the dialogue around solidification will lean towards skepticism about change. Sufficient skepticism may be enough to protect the protocol, even as the protocol evolves (slowly).
In this year's reflections, I have begun to believe that this dialogue with solidification is not only our greatest effort but also a way to ensure that Ethereum does not develop in a way that is constrained and unable to respond to the future in an unpredictable manner. But I also believe that solidifiers— those who tend to slow things down, who prefer to change certain components only when absolutely necessary, and who fear that increased complexity and change will impact the upper layers— are a very small part of today's core L1 process and the larger community.
This camp and mindset are not yet strong enough to become a necessary immune system within the protocol. While there are many respected voices in this camp to ensure the existence of a minimum threshold, the arguments and merits of "towards a solidified protocol" must be articulated in the coming years, so that during this complex and ever-changing critical period, the balance does not tilt too far in the other direction.
4.2 Alignment of L2 with Ethereum
One of the benefits of an L2-centric roadmap is that it allows L1 to delegate various design decisions (cross-domain communication, virtual machine selection and optimization, parallelization, state management, etc.) to the "market," rather than painstakingly selecting and implementing specific (and likely suboptimal) solutions. This marketplace above Ethereum L1 can not only find good solutions in the short term but can also adapt to the growing and changing demands of the world over the coming decades. Need parallelization? You can try a new L2.
Want a better virtual machine to support necessary form verification? L2 can adapt to this change, or new L2s will emerge. This anti-solidification is built on a relatively solidified base layer, indeed achieving the best of both worlds.
As for the health of this market— the Ethereum L2 ecosystem is doing quite well. Several different optimistic EVM routes are underway, many different EVM-compatible/equivalent zk-rollups are racing to market, and some more experimental rollups are emerging from the fringes (like Fuel). Some believe this exploration has become somewhat stagnant— focusing solely on EVM— hoping for more dramatic changes that break away from L1 structures— Solana-rollups, highly parallelized rollups, etc.— but the market can still adapt to the successes or failures of current ideas. EVM seems to be a moat, and within that moat, most are building.
Given that all eggs are in the L2 basket, one thing I worry about is the alignment of L2, both in the short term and long term. There are two main issues— (1) L2 is parasitic and will eventually fork into L1; (2) L2 is Ethereum's standard, where users interact but do not believe in Ethereum's values— decentralization, resistance to censorship, support for public goods, radical cooperation, and so on.
The former is more of an existential question— is being anchored in Ethereum's security zone truly valuable? This is essentially the argument for the L2 roadmap— these scalable environments inheriting Ethereum's security and native bridging are valuable to users, and therefore valuable to the developers, companies, and communities building and maintaining them.
I believe in this argument— achieving sufficient cryptoeconomic security is difficult, and in an increasingly competitive environment, most blockchains will inevitably fail to reach sufficient levels. Cryptoeconomic security is a limited resource, a function of the ongoing economic demands of these systems. Therefore, while I do expect some L2s to "abandon" Ethereum and try to leave— some may succeed, others may fail— I do not believe this will happen on a large scale, and a few L2s leaving will not break the theory of cryptoeconomic security as a service.
As for (2), I have more concerns. L2 will inevitably become the primary touchpoint for the vast majority of users. In most cases, they will exist within L2, interact within L2, and bridge between L2s, as these L2s are both secure and affordable. Thus, L2 becomes the face of Ethereum. This way may be secure, but is it decentralized, resistant to censorship, and does it uphold Ethereum's values, encouraging the world to continually reimagine itself? At this point, the answers to these questions are clearly not affirmative.
Venture capital firms are stepping into the L2 space, tokens are being randomly allocated to insiders everywhere, and most governance models are oligarchic, with arbitrary upgrades made without notice. Not to mention that most L2s make sacrifices in their security models to go to market, hoping to iterate towards decentralization (e.g., no fraud proofs, single sequencers, unclear emergency exit mechanisms, etc.).
There is an interesting balance here. L2 can and hopes to invest more energy in advertising and business development, competing with alt-L1s that are very aggressive in this area. This allows Ethereum L1 to remain neutral in this regard, while the layers above attempt numerous customer acquisition and onboarding techniques. But whether L2 will default to retaining Ethereum's brand, values, and soul is not clear.
Managing a healthy L2 ecosystem is crucial and requires multifaceted efforts— researching and promoting secure structures, realizing L2's value (showing its essence rather than the way it is portrayed), and exploring governance risks, security trade-offs, poor token allocations, value adjustments, and other emerging issues for L2 whenever possible.
Moreover, we must not only focus on the negatives but also celebrate the positive, secure, and consistent parts. Today's Ethereum community has immense power in setting norms that will define the development of the L2 movement over the coming decades. We must ensure that L2 not only inherits Ethereum's security but also its legitimacy.
Conclusion
This article represents the author's extremely short-sighted and biased views. There are many issues, even many success stories, that the author of this article is unaware of or did not have time to write about.
In short, Ethereum is stronger than ever. The community has achieved astonishing results in building core infrastructure, scaling through community layers, and community building. However, significant challenges and enormous risks remain.
Ethereum is still vibrant. Please do your part to keep it that way.