Lighthouse
Key Requirements, Architecture, Specifications, and Security
1. Key Requirements
User Protection
Lighthouse balances revenue generation with user protection through a Top-of-Block (ToB) / Bottom-of-Block (BoB) framework that allocates blockspace strategically:
Top-of-Block (ToB):
Builder Revenue: ToB provides builders with access to liquidity across rollups and Ethereum, unlocking strategic MEV opportunities to increase profits.
Rollup Revenue: Builders compete in blockspace auctions, and this competition—enhanced by cross-rollup arbitrage—maximizes revenue for rollups.
Market Stability: By enabling arbitrage between centralized and decentralized exchanges, Lighthouse helps minimize price disparities and stabilize the market.
Bottom-of-Block (BoB):
User Safety: BoB secures blockspace for regular user transactions, protecting them from harmful MEV practices like frontrunning and sandwich attacks, while ensuring censorship resistance.
Revenue Maximization
Lighthouse uses advanced auction mechanisms to optimize builder revenue:
Just-in-Time Auction: Builders can make real-time profitability assessments.
Cross-Rollup Bundle Auction: Winning a ToB auction allows builders to coordinate transactions across multiple rollups for consistent MEV capture and seamless atomic execution.
Governance Integrity
Lighthouse is designed to integrate smoothly with existing rollup governance frameworks without causing disruptions:
Flexible Auction Scheduling: Adapts to the unique block production times of rollups, enabling broad, simultaneous support.
Custom Auction Cycles: Divides Lighthouse operations into intervals that match rollup-specific governance and block production processes.
By addressing these requirements, Lighthouse promotes a unified, revenue-enhancing system that protects users while fostering a dynamic, competitive blockspace ecosystem.
2. Architecture
Lighthouse runs trustless, permissionless auctions between rollups and builders, creating an open ecosystem for blockspace allocation. Builders can bid for the Top-of-Block (ToB) segment, capture MEV, and settle auction fees using L1 native tokens.
Each block in Lighthouse is divided into two distinct parts:
Top-of-Block (ToB)
Transactions in ToB are secured through Lighthouse auctions.
Builders participate in permissionless auctions to secure ToB, optimizing MEV strategies such as backrunning arbitrage and CEX-DEX arbitrage.
Builders analyze the previous state of rollups to make informed bids, maximizing their potential returns. Once ToB rights are secured, they can achieve atomic execution across rollups, enhancing profitability.
Bottom-of-Block (BoB)
Reserved exclusively for user transactions, ensuring secure and interference-free execution.
Secure Block Building (SBB) protects user transactions against censorship and harmful MEV.
The Secure Block Building component within each rollup manages ToB and BoB, distinguishing builder transactions from regular user transactions. Once a block is formed, the rollup sequencer executes the entire block.
This balanced architecture benefits both builders and users: builders gain access to lucrative opportunities while users receive strong protections. Through Lighthouse’s trustless and decentralized auction system, rollups enjoy a sustainable revenue model that promotes a thriving market.
Entities
Seller (
Proposer)Role: The Proposer is an entity with the signing key responsible for submitting blocks.
Responsibilities: Includes the winning builder's transactions in the Top-of-Block (ToB) for the assigned slot.
Block Creation: The rollup sequencer acts as the proposer, constructing the block by including the builder's bundle. The proposer ensures the block includes both ToB and BoB. Ultimately, the sequencer is fully responsible for the final block contnet, managing the complete execution of transactions.
Buyer (
Builder):Role: The Builder constructs the content of the block.
Responsibilities: Purchases the right to include transactions in ToB for a designated slot.
Mediator (
Lighthouse):Role: Acts as the intermediary facilitating the auction process
Responsibilities: Ensures a secure and trustless contract between the seller (proposer) and buyer (builder).
Process Overview
Seller Registration:
The Rollup Sequencer registers as a seller by locking collateral on Layer 1 (L1).
Bridge: Lighthouse securely stores the Sequencer’s registration details.
Blockspace Listing:
The Rollup Sequencer lists blockspace for sale by registering with Lighthouse.
Lighthouse verifies the seller’s details and publicly shares the details of available slots.
Buyer Registration:
Builders deposit auction fees into Lighthouse to participate.
Bridge: Assets are locked on L1 and transferred to Lighthouse.
Bid Submission:
Builders compete for ToB space by submitting their bids through Lighthouse.
Lighthouse verifies all bids, selects the highest, and announces the winning Builder.
ToB Submission:
The winning Builder constructs the ToB and submits it to Lighthouse.
Block Creation:
The Rollup Sequencer includes the ToB while generating the block.
Non-compliance Handling:
If the Rollup Sequencer fails to include the ToB:
Bridge: A Slasher forwards details (auction information, winning builder’s address, and ToB) from Lighthouse to L1
L1 reviews the Sequencer’s actions and, if necessary, enforces a penalty by slashing the Sequencer’s collateral.
3. Technical Specifications
Design
Lighthouse operates based on a set of design dimensions that shape the interaction between Rollup Sequencers and Builders. Each dimension influences the auction mechanics, participant experience, and overall efficiency of the Lighthouse ecosystem. Below are the design dimensions we considered, along with the choices we made and the rationale for each decision.
Bidder Access Control: Permissioned / Permissionless
Choice: Permissionless
Rationale: We chose a permissionless system to ensure that any participant can access the auction without requiring prior approval or authorization. This open approach increases competition and fosters a more decentralized ecosystem, and encourages diverse participation in MEV opportunities.
Winner Selection: Highest Bid (Auction) / Lottery
Choice: Highest Bid (Auction)
Rationale: Selecting the highest bid as the winner promotes a competitive environment where Builders are incentivized to bid their true valuation of blockspace. This approach maximizes revenue for Rollup Sequencers and aligns with our goal of creating an efficient and economically sustainable marketplace.
Bid Time: After Previous State Disclosure / Before Previous State Disclosure
Choice: After Previous State Disclosure
Rationale: Allowing bids to be placed after the previous state is disclosed provides Builders with the information they need to make informed bidding decisions. This transparency reduces uncertainty and allows Builders to optimize their MEV strategies based on the most recent data, ultimately improving the quality of bids.
Bidder’s Fee Payment Method: Instant Payment with Winner Update and Refund / Prepayment with Refund / Postpayment
Choice: Instant Payment with Winner Update and Refund
Rationale: Requiring instant payment at the time of bidding ensures the auction is efficiently settled, minimizing potential delays and reducing the risk of non-payment. This mechanism provides a clear and immediate commitment from Builders while allowing refunds for unsuccessful bids, streamlining the auction process.
Winning Bidders per Slot: 1 (Bid for Entire ToB) / Multiple (Bid for Partial Space)
Choice: 1 (Bid for Entire ToB)
Rationale: By allowing a single winning bidder for the entire ToB, we simplify the auction structure and provide Builders with full control over the top blockspace. This approach optimizes MEV capture for Builders by allowing them to fully utilize the ToB, making it a more attractive and valuable position to bid for.
Seller’s Previous State Disclosure Method: Data Availability (DA) / Sequencer Self-Disclosure with Builder Tool / Lighthouse (Broadcast Relay)
Choice: Sequencer Self-Disclosure with Builder Tool
Rationale: Having the Sequencer directly disclose the previous state and provide a Builder tool enables efficient and direct access to state information. This setup reduces dependency on external relays and ensures that Builders have the tools necessary to interpret state data accurately, making it easier to participate in the auction effectively.
Transaction Guarantee: Inclusion / Execution
Choice: Execution
Rationale: We chose to guarantee both the inclusion and execution of transactions in the specified order. This level of assurance gives Builders confidence that their transactions will not only be included but also executed as intended, which is crucial for complex MEV strategies that rely on specific transaction sequencing.
By selecting these options, we have designed Lighthouse to support an open, efficient, and reliable blockspace marketplace. Each choice is intended to align with our goals of decentralization, transparency, and maximizing economic incentives, creating a robust platform for both Rollup Sequencers and Builders to interact in a trustless and decentralized manner.
The diagram illustrates the sequence of actions and interactions between the Sequencer, Lighthouse, Builder, and L1 contracts within the Lighthouse. The process is as follows:
Auction Initiation: The Sequencer begins by calling
startAuction()on Lighthouse, initiating the auction process for blockspace.Auction Notification: Lighthouse broadcasts the auction event, allowing Builders to listen for and participate in the auction.
Bid Submission: Builders submit bids via Lighthouse’s
bid()function. Lighthouse records the bids and identifies the highest bidder.Winning Bid Record: The highest bid is recorded in Lighthouse, and the winning Builder is notified.
ToB Submission: The winning Builder submits their transactions for the Top of Block (ToB) section to Lighthouse.
Block Building: Lighthouse notifies the Sequencer to include the ToB transactions, and the Sequencer constructs the block, incorporating the Builder's ToB.
Slash Mechanism: If the Sequencer fails to fulfill its obligations, the Builder can call
slashSequencer()on L1, triggering a penalty (slashing) of the Sequencer’s collateral.
This diagram captures the core interactions and enforcements in Lighthouse, ensuring an efficient, secure, and transparent auction process for blockspace.
Contract overview
L1 Contracts
Asset Bridge Contract: facilitates asset transfers between L1 and Lighthouse by locking and unlocking assets.send: Lock assets on L1 and transfers wrapped tokens to Lighthouse.receive: Unlocks wrapped tokens on Lighthouse and sends the equivalent assets back to L1 users.
Sequencer Registry and Slashing Contract: manages the registration, deregistration, and slashing of Sequencers to ensure accountability.registerSequencer: Registers a Sequencer by locking collateral.deregisterSequencer: Allows Sequencers to unregister, releasing locked collateral.slashSequencer: Slashes the collateral of a Sequencer if obligations are not met, enforcing penalties for non-compliance.
Lighthouse Contracts
Asset Bridge Contract: mirrors the L1 Asset Bridge functionality, managing the minting and burning of wrapped tokens on Lighthouse.receive: Mints wrapped tokens on Lighthouse after assets are locked on L1.send: Burns wrapped tokens on Lighthouse to release equivalent assets back to L1.
Payment Token Contract: manages payment tokens used in Lighthouse for auction transactions.transfer: Transfers payment tokens (e.g., wrapped ETH) within Lighthouse.approve: Grants permission to other contracts to use the tokens on behalf of the owner.
Blockspace Auction Management Contract: manages the auctioning of blockspace, handling the bidding process and transaction submission.registerSequencer: Verifies and registers Sequencers eligible to participate in auctions.deregisterSequencer: Deregisters Sequencers, removing them from eligible participants.startAuction: Initializes an auction, defining parameters like auction ID, block height, duration, and bundle size.bid: Allows Builders to place bids, transferring payment tokens and updating the highest bid.submitToB: Records the transactions for the winning Builder’s ToB space.
The timing and sequence of actions
Here’s a breakdown of each step in terms of timing:
Auction Start Timing:
Sequencer initiates the auction for the Top of Block (ToB) space in an upcoming rollup block (#3 in this example).
This auction begins after the completion of block #2, allowing Builders to prepare their bids in advance of block #3.
Auction Process in Lighthouse (Bid Submission and Selection):
During this phase, Builders actively participate in the auction by submitting their bids for the ToB space in block #3.
The bid submission and selection happen concurrently, with Lighthouse evaluating bids in real-time to determine the highest bid, which will secure the ToB space.
ToB Submission Timing:
Once the auction concludes and a winning bid is selected, the chosen Builder submits their ToB transactions to Lighthouse.
This submission occurs before block #3 is finalized, ensuring that the winning transactions are available for inclusion in the top portion of the block.
Block Building and Finalization:
With the ToB transactions from the winning Builder, the Rollup Sequencer constructs block #3, positioning the Builder’s transactions at the top as specified.
This process completes the integration of the auctioned ToB, aligning with the timing and sequence requirements for Lighthouse.
4. Security
Threat models
In the Lighthouse, various entities participate in the auction and blockspace allocation process, each with potential vulnerabilities and risks. To maintain a secure and trustless environment, it is crucial to address the threat models associated with each entity involved: the Sequencer, Builder, and Mediator.
Sequencer (Seller)
- Fails to include the transactions as agreed upon in the designated slot, violating the terms of the auction. - Lacks legitimate authority over the slot it intends to sell, potentially resulting in invalid transaction processing.
Builder (Buyer)
- Does not fulfill the required bit payment, compromising the fairness and economic balance of the auction.
Mediator (Lighthouse)
- Publishes invalid or incorrect information, leading to misinformation and potential exploitation by participants. - Fails to execute the auction according to the established rules, undermining the trust in the auction process. - Sells overlapping slots to different buyers, creating conflicts and issues in transaction inclusion and execution. - Does not refund bids to participants who did not win the auction, leading to financial losses for non-winning Builders.
Mitigation Strategies
For each entity involved in the Lighthouse, specific reliability methods are implemented to mitigate the potential risks outlined in the threat models. These strategies are designed to ensure compliance, protect users, and maintain trust within the Lighthouse ecosystem.
Sequencer (Seller) Reliability Measures
To ensure that the Sequencer fulfills its commitment to include the designated transactions in the assigned block, Lighthouse has implemented a collateral-based enforcement mechanism on L1. When a Sequencer is registered, it locks collateral on L1, which can only be withdrawn after a set block delay, preventing premature withdrawal.
If the Sequencer fails to meet its obligations, a slashing mechanism is triggered. This mechanism verifies the Sequencer’s actions by comparing the finalized block information on L1 with the contract information on Lighthouse. If the Sequencer has violated its contract terms by omitting required transactions, its locked collateral is slashed. This approach ensures accountability and provides a strong financial disincentive against non-compliance, upholding the integrity of the Lighthouse.
Builder (Buyer) Reliability Measures
To prevent unpaid bids, Lighthouse enforces real-time settlement of bid payments. Builders are required to fulfill the bid payment immediately upon placing a bid, ensuring that only financially committed bids are processed. This instant settlement mechanism eliminates the possibility of delayed or unpaid bids, maintaining the fairness of the auction and protecting against time-delay attacks.
Additionally, any deviation in the Builder’s blockspace configuration or failure to submit transactions within the designated slot impacts only the Builder, as Lighthouse’s design isolates these risks, minimizing disruptions to the broader ecosystem.
Mediator (Lighthouse) Reliability Measures
Lighthouse is built with L1-grade security to prevent vulnerabilities and ensure a reliable auction process. Immutable smart contracts enforce established auction rules, delivering fair and transparent execution that sustains participant trust. Each slot is uniquely allocated to prevent overlapping sales, while an automated refund mechanism immediately returns bids to non-winning participants, safeguarding against financial losses and promoting a fair, trustworthy experience.
Last updated
